Nil-pointer dereference in CreateCustomVolumeFromBackup in LXD up to version 6.8 and 5.21 on Linux allows an authenticated user with can_create_storage_volumes permissions to cause a denial of service via a specially crafted custom-volume backup tarball that omits the expires_at snapshot field.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://github.com/canonical/lxd/pull/18320 Issue Tracking, Patch
- https://github.com/canonical/lxd/pull/18390 Issue Tracking, Patch
- https://github.com/canonical/lxd/security/advisories/GHSA-j93m-3j9p-m5m8 Exploit, Patch, Vendor Advisory
- https://github.com/canonical/lxd/security/advisories/GHSA-j93m-3j9p-m5m8 Exploit, Patch, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.5 · canonicalNVD modified 2026-10-25 17:10
Affected (CPE criteria) 1
cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*
References 4
- https://github.com/canonical/lxd/pull/18320 Issue Tracking, Patch
- https://github.com/canonical/lxd/pull/18390 Issue Tracking, Patch
- https://github.com/canonical/lxd/security/advisories/GHSA-j93m-3j9p-m5m8 Exploit, Patch, Vendor Advisory
- https://github.com/canonical/lxd/security/advisories/GHSA-j93m-3j9p-m5m8 Exploit, Patch, Vendor Advisory