tocsin

CVE-2026-40197

4 advisories.

Go/github.com/lxc/incus/v6/cmd/incusd CVE-2026-40197: medium 6.5, EPSS 0.44%

Incus has a Nil-Pointer Dereference via Custom Volume Import

Action: Upgrade github.com/lxc/incus/v6/cmd/incusd to 7.0.0 or later.

go get github.com/lxc/incus/v6/cmd/incusd@v7.0.0

Affected

introducedfixedlast affected
07.0.0-

Fixed versions

7.0.0

Sources

CVE-2026-40197 · published · modified · JSON

Go/github.com/lxc/incus CVE-2026-40197: unknown, EPSS 0.44%

Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-40197 · published · modified · JSON

Go/github.com/lxc/incus/v6 CVE-2026-40197: unknown, EPSS 0.44%

Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2026-40197 · published · modified · JSON

Go/github.com/lxc/incus/v7 CVE-2026-40197: unknown, EPSS 0.44%

Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

Action: Upgrade github.com/lxc/incus/v7 to 7.0.0 or later.

go get github.com/lxc/incus/v7@v7.0.0

Affected

introducedfixedlast affected
07.0.0-

Fixed versions

7.0.0

Sources

CVE-2026-40197 · published · modified · JSON