The vulnerabilities of the `getImageMetadata()` and `backup.GetInfo()` functions in the container management system and the Incus virtual machine manager allow a attacker to trigger a service failure.

The vulnerabilities of the getImageMetadata and backup.GetInfo functions in the container management system and the virtual machine manager Incus are related to unlimited resource distribution. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...

CVE-2026-41684: NULL Pointer Dereference

Incus is a system container and virtual machine manager. Prior to version 7.0.0, backup.GetInfo trusts the inline backup/index.yaml config when present and only falls back to parsing the legacy backup/container/backup.yaml file if result.Config == nil. As a result, an archive can carry a valid...