LXD vulnerable to a local privilege escalation through custom storage volumes in lxd in github.com/canonical/lxd

Description

References

• canonical/lxd security advisory · ADVISORY
• canonical/lxd#16904 · FIX
• canonical/lxd#16922 · FIX
• canonical/lxd#16923 · FIX
• canonical/lxd#16924 · FIX
• lxc/incus · WEB
• lxc/incus security advisory · WEB

Autres vulnérabilités de github.com/canonical/lxd

• CVE-2026-34179CRITIQUE 9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when ha…
• CVE-2026-34178CRITIQUE 9.1In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but…
• CVE-2026-34177CRITIQUE 9.1Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), w…
• CVE-2026-3351MOYENNE 4.3Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to e…
• GHSA-3g2j-vm47-x4mjÉLEVÉELXD vulnerable to a local privilege escalation through custom storage volumes