GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

OPENSUSE-SU-2026:21788-1

Vulnerability from csaf_opensuse - Published: 2026-09-02 12:35 - Updated: 2026-09-16 21:48
Summary
Security update for lxd
Severity
Critical
Notes
Title of the patch: Security update for lxd
Description of the patch: This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: * bsc#1274937, CVE-2026-63293, bsc#1274936, CVE-2026-62420, bsc#1274954, CVE-2026-63295, bsc#1274963, CVE-2026-63297, bsc#1274961, CVE-2026-63296, bsc#1275085, CVE-2026-63299, bsc#1275084, CVE-2026-63298, bsc#1275090, CVE-2026-66898 * https://canonical.com/lxd/docs/latest/reference/release- notes/5.21/release-notes-5.21.6/ * https://canonical.com/lxd/docs/latest/reference/release- notes/5.21/release-notes-5.21.5/ * https://discourse.ubuntu.com/t/lxd-5-21-4-lts-has-been- released/66602 * https://discourse.ubuntu.com/t/lxd-5-21-3-lts-has-been- released/53768 * https://discourse.ubuntu.com/t/lxd-5-21-2-has-been- released/46443 - Migrate to single LXD/Incus OVMF handling (lxd-ovmf-setup): * Allow aarch64 arch_vm_support * Remove OVMF symlinks * Require the new lxd-ovmf-setup packages
Patchnames: openSUSE-Leap-16.0-packagehub-559
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2023-46565
5.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64 —
Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch —
Vendor Fix
Threats
Impact moderate
CVE-2026-62420
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-63293
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-63295
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact moderate
CVE-2026-63296
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-63297
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-63298
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-63299
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
CVE-2026-66898
Affected products
Recommended 5 products, the same list as for CVE-2023-46565
Threats
Impact critical
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/o… self
https://bugzilla.suse.com/1223794 self
https://bugzilla.suse.com/1274936 self
https://bugzilla.suse.com/1274937 self
https://bugzilla.suse.com/1274954 self
https://bugzilla.suse.com/1274961 self
https://bugzilla.suse.com/1274963 self
https://bugzilla.suse.com/1275084 self
https://bugzilla.suse.com/1275085 self
https://bugzilla.suse.com/1275090 self
https://www.suse.com/security/cve/CVE-2023-46565/ self
https://www.suse.com/security/cve/CVE-2026-62420/ self
https://www.suse.com/security/cve/CVE-2026-63293/ self
https://www.suse.com/security/cve/CVE-2026-63295/ self
https://www.suse.com/security/cve/CVE-2026-63296/ self
https://www.suse.com/security/cve/CVE-2026-63297/ self
https://www.suse.com/security/cve/CVE-2026-63298/ self
https://www.suse.com/security/cve/CVE-2026-63299/ self
https://www.suse.com/security/cve/CVE-2026-66898/ self
https://www.suse.com/security/cve/CVE-2023-46565 external
https://bugzilla.suse.com/1223793 external
https://www.suse.com/security/cve/CVE-2026-62420 external
https://bugzilla.suse.com/1274936 external
https://www.suse.com/security/cve/CVE-2026-63293 external
https://bugzilla.suse.com/1274937 external
https://www.suse.com/security/cve/CVE-2026-63295 external
https://bugzilla.suse.com/1274954 external
https://www.suse.com/security/cve/CVE-2026-63296 external
https://bugzilla.suse.com/1274961 external
https://www.suse.com/security/cve/CVE-2026-63297 external
https://bugzilla.suse.com/1274963 external
https://www.suse.com/security/cve/CVE-2026-63298 external
https://bugzilla.suse.com/1275084 external
https://www.suse.com/security/cve/CVE-2026-63299 external
https://bugzilla.suse.com/1275085 external
https://www.suse.com/security/cve/CVE-2026-66898 external
https://bugzilla.suse.com/1275090 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for lxd",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for lxd fixes the following issues:\n\nChanges in lxd:\n\n- update to 5.21.6:\n  * bsc#1274937, CVE-2026-63293, bsc#1274936, CVE-2026-62420,\n    bsc#1274954, CVE-2026-63295, bsc#1274963, CVE-2026-63297,\n    bsc#1274961, CVE-2026-63296, bsc#1275085, CVE-2026-63299,\n    bsc#1275084, CVE-2026-63298, bsc#1275090, CVE-2026-66898\n  * https://canonical.com/lxd/docs/latest/reference/release-\n    notes/5.21/release-notes-5.21.6/\n  * https://canonical.com/lxd/docs/latest/reference/release-\n    notes/5.21/release-notes-5.21.5/\n  * https://discourse.ubuntu.com/t/lxd-5-21-4-lts-has-been-\n    released/66602\n  * https://discourse.ubuntu.com/t/lxd-5-21-3-lts-has-been-\n    released/53768\n  * https://discourse.ubuntu.com/t/lxd-5-21-2-has-been-\n    released/46443\n\n- Migrate to single LXD/Incus OVMF handling (lxd-ovmf-setup):\n  * Allow aarch64 arch_vm_support\n  * Remove OVMF symlinks\n  * Require the new lxd-ovmf-setup packages\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-packagehub-559",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21788-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1223794",
        "url": "https://bugzilla.suse.com/1223794"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274936",
        "url": "https://bugzilla.suse.com/1274936"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274937",
        "url": "https://bugzilla.suse.com/1274937"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274954",
        "url": "https://bugzilla.suse.com/1274954"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274961",
        "url": "https://bugzilla.suse.com/1274961"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1274963",
        "url": "https://bugzilla.suse.com/1274963"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275084",
        "url": "https://bugzilla.suse.com/1275084"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275085",
        "url": "https://bugzilla.suse.com/1275085"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1275090",
        "url": "https://bugzilla.suse.com/1275090"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-46565 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-46565/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-62420 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-62420/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63293 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63293/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63295 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63295/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63296 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63296/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63297 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63297/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63298 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63298/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-63299 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-63299/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-66898 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-66898/"
      }
    ],
    "title": "Security update for lxd",
    "tracking": {
      "current_release_date": "2026-09-16T21:48:22Z",
      "generator": {
        "date": "2026-09-02T12:35:45Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:21788-1",
      "initial_release_date": "2026-09-02T12:35:45Z",
      "revision_history": [
        {
          "date": "2026-09-02T12:35:45Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:47:29Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:48:22Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lxd-5.21.6-bp160.1.1.aarch64",
                "product": {
                  "name": "lxd-5.21.6-bp160.1.1.aarch64",
                  "product_id": "lxd-5.21.6-bp160.1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/lxd@5.21.6-bp160.1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lxd-bash-completion-5.21.6-bp160.1.1.noarch",
                "product": {
                  "name": "lxd-bash-completion-5.21.6-bp160.1.1.noarch",
                  "product_id": "lxd-bash-completion-5.21.6-bp160.1.1.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/lxd-bash-completion@5.21.6-bp160.1.1?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lxd-5.21.6-bp160.1.1.ppc64le",
                "product": {
                  "name": "lxd-5.21.6-bp160.1.1.ppc64le",
                  "product_id": "lxd-5.21.6-bp160.1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/lxd@5.21.6-bp160.1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lxd-5.21.6-bp160.1.1.s390x",
                "product": {
                  "name": "lxd-5.21.6-bp160.1.1.s390x",
                  "product_id": "lxd-5.21.6-bp160.1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/lxd@5.21.6-bp160.1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "lxd-5.21.6-bp160.1.1.x86_64",
                "product": {
                  "name": "lxd-5.21.6-bp160.1.1.x86_64",
                  "product_id": "lxd-5.21.6-bp160.1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/lxd@5.21.6-bp160.1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lxd-5.21.6-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64"
        },
        "product_reference": "lxd-5.21.6-bp160.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lxd-5.21.6-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le"
        },
        "product_reference": "lxd-5.21.6-bp160.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lxd-5.21.6-bp160.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x"
        },
        "product_reference": "lxd-5.21.6-bp160.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lxd-5.21.6-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64"
        },
        "product_reference": "lxd-5.21.6-bp160.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lxd-bash-completion-5.21.6-bp160.1.1.noarch as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        },
        "product_reference": "lxd-bash-completion-5.21.6-bp160.1.1.noarch",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-46565",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-46565"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to cause a denial of service via the handlingError function in pkg/server/fsm.go.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-46565",
          "url": "https://www.suse.com/security/cve/CVE-2023-46565"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1223793 for CVE-2023-46565",
          "url": "https://bugzilla.suse.com/1223793"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-46565"
    },
    {
      "cve": "CVE-2026-62420",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-62420"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations. When moving an instance cross-project to a different cluster member via POST /1.0/instances/{name} with migration: true, project: \u003ctarget\u003e, and target: \u003cmember\u003e, the destination node skips all project restriction checks because the request arrives as an internal cluster notification. An attacker can exploit this to introduce disallowed instance configurations into a restricted project.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-62420",
          "url": "https://www.suse.com/security/cve/CVE-2026-62420"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274936 for CVE-2026-62420",
          "url": "https://bugzilla.suse.com/1274936"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-62420"
    },
    {
      "cve": "CVE-2026-63293",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63293"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LXD fails to validate whether the metadata.yaml file is a symbolic link. An attacker can exploit this flaw by providing a crafted image archive with a symlinked metadata.yaml file pointing to target file paths on the host system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63293",
          "url": "https://www.suse.com/security/cve/CVE-2026-63293"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274937 for CVE-2026-63293",
          "url": "https://bugzilla.suse.com/1274937"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-63293"
    },
    {
      "cve": "CVE-2026-63295",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63295"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions. When a project is configured with restrictions on container privileges (such as enforcing restricted.containers.privilege=isolated), LXD fails to enforce the requirement if an instance configuration omits the security.idmap.isolated key. An attacker can exploit this flaw by creating or updating an instance without explicitly setting security.idmap.isolated, bypassing the target project\u0027s security constraints.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63295",
          "url": "https://www.suse.com/security/cve/CVE-2026-63295"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274954 for CVE-2026-63295",
          "url": "https://bugzilla.suse.com/1274954"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-63295"
    },
    {
      "cve": "CVE-2026-63296",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63296"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration. When migrating an instance to a target project, LXD accepts configuration overrides without validating the new configuration against the target project\u0027s enforced restrictions. An attacker can exploit this flaw to move instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63296",
          "url": "https://www.suse.com/security/cve/CVE-2026-63296"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274961 for CVE-2026-63296",
          "url": "https://bugzilla.suse.com/1274961"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-63296"
    },
    {
      "cve": "CVE-2026-63297",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63297"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies. When copying an instance to a target project, LXD performs restriction checks before configuration merging is complete, creating a time-of-check to time-of-use (TOCTOU) condition. An attacker can exploit this flaw to copy instances with disallowed high-privilege configurations into restricted projects, bypassing security controls.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63297",
          "url": "https://www.suse.com/security/cve/CVE-2026-63297"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1274963 for CVE-2026-63297",
          "url": "https://bugzilla.suse.com/1274963"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-63297"
    },
    {
      "cve": "CVE-2026-63298",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63298"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An improper neutralization of special elements vulnerability in LXD\u0027s NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the \u0027nvidia.driver.capabilities\u0027 or \u0027nvidia.require.*\u0027 configuration values, an attacker can manipulate the generated lxc.conf file. This flaw enables the attacker to execute arbitrary code on the host system with the privileges of the LXD daemon.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63298",
          "url": "https://www.suse.com/security/cve/CVE-2026-63298"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275084 for CVE-2026-63298",
          "url": "https://bugzilla.suse.com/1275084"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-63298"
    },
    {
      "cve": "CVE-2026-63299",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-63299"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits. Two related code paths fail to verify resource limits during volume operations: the storagePoolVolumeTypePostMove function omits the limits.AllowVolumeCreation check before moving a volume across projects, and volume snapshot restore operations skip the AllowVolumeUpdate check when the configuration is nil (Config == nil). An attacker can exploit these flaws to allocate storage resources that exceed the administrative limits configured for a project.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-63299",
          "url": "https://www.suse.com/security/cve/CVE-2026-63299"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275085 for CVE-2026-63299",
          "url": "https://bugzilla.suse.com/1275085"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-63299"
    },
    {
      "cve": "CVE-2026-66898",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-66898"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restoring a backup archive, LXD fails to validate instance and storage volume names contained within the archive metadata. An attacker can exploit this flaw by supplying a crafted backup archive with malicious instance or volume names containing path traversal sequences, potentially allowing file access or overwriting outside the designated restore directory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
          "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
          "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-66898",
          "url": "https://www.suse.com/security/cve/CVE-2026-66898"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1275090 for CVE-2026-66898",
          "url": "https://bugzilla.suse.com/1275090"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.aarch64",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.ppc64le",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.s390x",
            "openSUSE Leap 16.0:lxd-5.21.6-bp160.1.1.x86_64",
            "openSUSE Leap 16.0:lxd-bash-completion-5.21.6-bp160.1.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-02T12:35:45Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2026-66898"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.