Linuxcontainers vulnerabilities

Products

• Incus 18
• Lxc 12

Newest

• linuxcontainers incus Incus: Unbounded binary import disk exhaustion CVE-2026-41685 Fix available 4.3 MediumMay 4, 2026
• linuxcontainers incus Incus: Nil Dereferences on Restore via Malformed YAML CVE-2026-41684 Fix available 6.5 MediumMay 4, 2026
• linuxcontainers incus Incus: Unbounded YAML Metadata Decode via Parsing CVE-2026-41648 Fix available 5.3 MediumMay 4, 2026
• linuxcontainers incus Incus: Nil-Pointer Dereference via S3 Bucket Import CVE-2026-41647 Fix available 6.5 MediumMay 4, 2026
• linuxcontainers incus Incus out-of-bounds panic in snapshot metadata handling allows denial of service CVE-2026-40251 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus OVN TLS verification accepts peer-supplied roots and permits endpoint impersonation CVE-2026-40243 Fix available 2.3 LowMay 4, 2026
• linuxcontainers incus Incus nil-pointer dereference in custom volume import allows denial of service CVE-2026-40197 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus nil-pointer dereference in storage bucket import allows denial of service CVE-2026-40195 Fix available 7.1 HighMay 4, 2026
• linuxcontainers incus Incus blind SSRF via image import preflight HEAD request CVE-2026-35527 Fix available 5.3 MediumMay 4, 2026
• linuxcontainers lxc lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion CVE-2026-39402 Fix available 4.3 MediumMay 4, 2026
• linuxcontainers incus Abitrary file write through systemd-creds option CVE-2026-33945 Fix available 10.0 CriticalMarch 26, 2026
• linuxcontainers incus Local Incus UI web server vulnerable to nuthentication bypass CVE-2026-33898 Fix available 8.8 HighMarch 26, 2026
• linuxcontainers incus Incus vulnerable to arbitrary file read and write through pongo templates CVE-2026-33897 Fix available 10.0 CriticalMarch 26, 2026
• linuxcontainers incus Incus vulnerable to denial of source through crafted bucket backup file CVE-2026-33743 Fix available 6.5 MediumMarch 26, 2026
• linuxcontainers incus Incus vulnerable to local privilege escalation through VM screenshot path CVE-2026-33711 Fix available 4.7 MediumMarch 26, 2026
• linuxcontainers incus Incus does not verify combined fingerprint when downloading images from simplestreams servers CVE-2026-33542 Fix available 5.7 MediumMarch 26, 2026
• linuxcontainers incus Incus container image templating arbitrary host file read and write CVE-2026-23954 Fix available 8.7 HighJanuary 22, 2026
• linuxcontainers incus Incus container environment configuration newline injection CVE-2026-23953 Fix available 8.7 HighJanuary 22, 2026
• linuxcontainers incus Incus vulnerable to local privilege escalation through custom storage volumes CVE-2025-64507 Fix available 8.6 HighNovember 10, 2025
• linuxcontainers lxc lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer... CVE-2022-47952 Public exploitFix available 3.3 LowJanuary 1, 2023
• linuxcontainers lxc In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature... CVE-2017-18641 Fix available 8.1 HighFebruary 10, 2020
• canonical lxd chmod race in doUidshiftIntoContainer CVE-2015-1340 Fix available 7.0 HighApril 22, 2019
• docker, linuxfoundation runc, apache mesos +15 more +17 more runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... CVE-2019-5736 Public exploitFix available EPSS 98.5% 8.6 HighFebruary 11, 2019
• linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 more The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files CVE-2018-6556 Fix available 3.3 LowAugust 6, 2018
• linuxcontainers lxc lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create... CVE-2017-5985 Fix available 3.3 LowMarch 9, 2017
• linuxcontainers lxc An issue was discovered in Linux Containers (LXC) before 2016-02-22. When executing a program via... CVE-2016-10124 Fix available 8.6 HighJanuary 9, 2017
• linuxcontainers lxc lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged... CVE-2016-8649 Fix available 9.1 CriticalNovember 23, 2016
• linuxcontainers lxc, canonical ubuntu linux +1 more lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to... CVE-2015-1335 Fix available 7.2 HighSeptember 29, 2015
• linuxcontainers lxc attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local... CVE-2015-1334 Fix available 4.6 MediumJuly 22, 2015
• linuxcontainers lxc lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink... CVE-2015-1331 Fix available 4.9 MediumJuly 22, 2015
• canonical ubuntu linux, linuxcontainers cgmanager +1 more cmanager 0.32 does not properly enforce nesting when modifying cgroup properties, which allows... CVE-2014-1425 Fix available 2.1 LowJanuary 6, 2015
• linuxcontainers lxc The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write... CVE-2013-6441 Fix available 7.2 HighDecember 31, 2013