GHSA-M2VM-4PMQ-6GPC vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-C5GG-V573-HV7F vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-7W83-2RGM-8VJ5 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-6992-8G76-6R5H vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-5R72-P4CV-H344 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-5JGQ-PV8M-5CX7 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

GHSA-42MQ-7943-CJ3H vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-23210 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-23207 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-23137 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-23017 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2026-22985 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

CVE-2024-58096 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...

USN-8161-1 qemu vulnerabilities

It was discovered that the LSI53C895A SCSI Host Bus Adapter implementation of QEMU incorrectly handled memory. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2024-6519 It was discovered...

USN-8161-1: QEMU vulnerabilities

It was discovered that the LSI53C895A SCSI Host Bus Adapter implementation of QEMU incorrectly handled memory. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2024-6519 It was discovered...

DEBIAN-CVE-2026-34177

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote...

CVE-2026-34177

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote...

CVE-2026-34177

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote...

UBUNTU-CVE-2026-34177

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden lxd/project/limits/permissions.go, which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote...

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via the isVMLowLevelOptionForbidden function in lxd/project/limits/permissions.go. An attacker can set forbidden low-level VM configuration keys, such as raw.apparmor or raw.qemu.conf in a project th...