Go/github.com/canonical/lxd: high
LXD vulnerable to a local privilege escalation through custom storage volumes
Action: Upgrade github.com/canonical/lxd to 0.0.0-20251110144034-698854d0164f or later.
go get github.com/canonical/lxd@v0.0.0-20251110144034-698854d0164fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20251110144034-698854d0164f |
Sources
- osv: GHSA-3g2j-vm47-x4mj
- https://github.com/canonical/lxd/security/advisories/GHSA-3g2j-vm47-x4mj
- https://github.com/lxc/incus/security/advisories/GHSA-56mx-8g9f-5crf
- https://github.com/lxc/incus/issues/2641
- https://github.com/canonical/lxd/pull/16904
- https://github.com/canonical/lxd/pull/16922
- https://github.com/canonical/lxd/pull/16923
- https://github.com/canonical/lxd/pull/16924
- https://github.com/canonical/lxd
published · modified · JSON