snap-confine + systemd-tmpfiles = root (CVE-2026-3888) (via kevincox) — discussion

#linux #security