The vulnerability in gdm3 3.14.2 and possibly later versions causes an information leak before the screen lock engages. This means that some information may be accessible before the system fully locks the screen, potentially exposing sensitive data. The CVSS vector (AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) indicates that the attack requires physical access (local), has low complexity, no privileges or user interaction needed, and results in a low confidentiality impact without affecting integrity or availability. The affected versions are specific Ubuntu package versions spanning multiple Ubuntu LTS releases and other versions as listed. There is no indication of known exploits or detailed vendor advisories included in the provided data.

The impact is limited to a low confidentiality information leak before the screen lock activates. There is no impact on system integrity or availability. The vulnerability requires physical access to the system and does not require user interaction or privileges. No known exploits in the wild have been reported, indicating limited practical exploitation to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch links or vendor advisories are provided, users should monitor official Ubuntu security channels for updates addressing this vulnerability. Until a fix is available, physical security controls to prevent unauthorized access before screen lock activation are recommended.