Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-41647

Incus: Nil-Pointer Dereference via S3 Bucket Import

Description

Incus is a system container and virtual machine manager. Prior to version 7.0.0, a missing error handling could lead an authenticated Incus user to cause a daemon crash through the import of a truncated storage bucket backup file. This issue has been patched in version 7.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

lxc incus

  • < 7.0.0affected

References