Critical severity9.1NVD Advisory· Published Apr 9, 2026· Updated Jun 17, 2026
CVE-2025-15480
CVE-2025-15480
Description
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:canonical:ubuntu_desktop_provision:24.04.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:canonical:ubuntu_desktop_provision:24.04.4:*:*:*:*:*:*:*
- (no CPE)range: 24.04.4
- Range: 24.04.4
Patches
Vulnerability mechanics
References
2- github.com/canonical/ubuntu-desktop-provision/pull/1399nvdIssue TrackingPatch
- github.com/canonical/ubuntu-desktop-provision/pull/1400nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.