[CVE-2026-85185 ] Published: Sep 28, 2026, 2:17:20 PM UTC
Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an authenticated client with permission to create instan
Critical(9.6) Affected Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.5.1-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.5.1-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Affected · Fixed: 7.5.1-1.1
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.5.1-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 7.5.1-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 7.5.1-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
[CVE-2026-39402 ] Published: May 4, 2026, 12:00:00 AM UTC
lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the find_line() function that allows an unprivileged user to delete OVS-attached network i
Medium(6.5) Affected Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.4-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.4-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Affected · Fixed: 7.4-1.1
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 7.4-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 7.4-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 7.4-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
[CVE-2026-33542 ] Published: Mar 26, 2026, 10:32:13 PM UTC
Incus is a system container and virtual machine manager. Prior to version 6.23.0, a lack of validation of the image fingerprint when downloading from simplestreams image servers opens the door to imag
High(8.5) Unknown Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.23-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.23-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.23-1.1
nvd · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.23-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.23-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.23-1.1
Version impact unknown
nvd · incus · opensuse · tumbleweed
[CVE-2026-23953 ] Published: Jan 22, 2026, 9:39:41 PM UTC
lxd: CVE-2026-23953
High(8.7) Unknown Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.22-1.1
Version impact unknown
dsa · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.22-1.1
Version impact unknown
dsa · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.22-1.1
dsa · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.22-1.1
Version impact unknown
dsa · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.22-1.1
Version impact unknown
dsa · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.22-1.1
Version impact unknown
dsa · incus · opensuse · tumbleweed
[CVE-2025-52881 ] Published: Nov 5, 2025, 12:00:00 AM UTC
runC vulnerabilities
High(8.2) Unknown Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.17-2.1
Version impact unknown
usn · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.17-2.1
Version impact unknown
usn · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.17-2.1
usn · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.17-2.1
Version impact unknown
usn · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.17-2.1
Version impact unknown
usn · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.17-2.1
Version impact unknown
usn · incus · opensuse · tumbleweed
[CVE-2025-52890 ] Published: Jun 25, 2025, 4:51:24 PM UTC
incus-6.14-1.1 on GA media
High(8.1) Unknown Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.14-1.1
pypi · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
[CVE-2025-52889 ] Published: Jun 25, 2025, 4:49:00 PM UTC
incus-6.14-1.1 on GA media
Low(3.4) Unknown Details (6) 6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Fixed · Fixed: 6.14-1.1
pypi · incus · opensuse · tumbleweed
6.23-3.1 · noarch · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
6.23-3.1 · x86_64 · tumbleweed
Unknown · Fixed: 6.14-1.1
Version impact unknown
pypi · incus · opensuse · tumbleweed
