| Name | CVE-2026-34177 |
| Description | Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote attacker with can_edit permission on a VM instance in a restricted project can inject an AppArmor rule and a QEMU chardev configuration that bridges the LXD Unix socket into the guest VM, enabling privilege escalation to LXD cluster administrator and subsequently to host root. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-6213-1 |
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| incus (PTS) | trixie | 6.0.4-2+deb13u4 | fixed |
| trixie (security) | 6.0.4-2+deb13u7 | fixed | |
| forky, sid | 6.0.6-3 | fixed | |
| lxd (PTS) | bookworm | 5.0.2-5+deb12u2 | vulnerable |
| bookworm (security) | 5.0.2-5+deb12u5 | fixed | |
| trixie | 5.0.2+git20231211.1364ae4-9+deb13u3 | vulnerable | |
| trixie (security) | 5.0.2+git20231211.1364ae4-9+deb13u5 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| incus | source | (unstable) | 6.0.2-1 | |||
| lxd | source | bookworm | 5.0.2-5+deb12u5 | DSA-6213-1 | ||
| lxd | source | trixie | 5.0.2+git20231211.1364ae4-9+deb13u5 | DSA-6213-1 | ||
| lxd | source | (unstable) | (unfixed) |
https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f
https://github.com/canonical/lxd/pull/17909
https://github.com/canonical/lxd/commit/2f85d3ec0a6f9c9de8c003b81591ec173d489914
https://github.com/canonical/lxd/commit/e72fee068c793fdd51633ec9a0239d81726f4f1d
Fixed by: https://github.com/lxc/incus/commit/e731940a565bd31ecad8883ea2429dcf269783f9 (v6.5.0)
Fixed by: https://github.com/lxc/incus/commit/f7f1ccbcd6fcb3ce7e87d877c718a2ba12c68fb8 (v6.0.2)