CVE-2026-34177

NameCVE-2026-34177
DescriptionCanonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote attacker with can_edit permission on a VM instance in a restricted project can inject an AppArmor rule and a QEMU chardev configuration that bridges the LXD Unix socket into the guest VM, enabling privilege escalation to LXD cluster administrator and subsequently to host root.
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDSA-6213-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
incus (PTS)trixie6.0.4-2+deb13u4fixed
trixie (security)6.0.4-2+deb13u7fixed
forky, sid6.0.6-3fixed
lxd (PTS)bookworm5.0.2-5+deb12u2vulnerable
bookworm (security)5.0.2-5+deb12u5fixed
trixie5.0.2+git20231211.1364ae4-9+deb13u3vulnerable
trixie (security)5.0.2+git20231211.1364ae4-9+deb13u5fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
incussource(unstable)6.0.2-1
lxdsourcebookworm5.0.2-5+deb12u5DSA-6213-1
lxdsourcetrixie5.0.2+git20231211.1364ae4-9+deb13u5DSA-6213-1
lxdsource(unstable)(unfixed)

Notes

https://github.com/canonical/lxd/security/advisories/GHSA-fm2x-c5qw-4h6f
https://github.com/canonical/lxd/pull/17909
https://github.com/canonical/lxd/commit/2f85d3ec0a6f9c9de8c003b81591ec173d489914
https://github.com/canonical/lxd/commit/e72fee068c793fdd51633ec9a0239d81726f4f1d
Fixed by: https://github.com/lxc/incus/commit/e731940a565bd31ecad8883ea2429dcf269783f9 (v6.5.0)
Fixed by: https://github.com/lxc/incus/commit/f7f1ccbcd6fcb3ce7e87d877c718a2ba12c68fb8 (v6.0.2)

Search for package or bug name: Reporting problems