Snap-confine and systemd-tmpfiles = root (CVE-2026-3888) | Dark Hacker News