{"schemaVersion":3,"id":"USN-8826-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"lxc vulnerabilities\n\nMaher Azzouzi discovered that LXC did not correctly handle logging\ncertain failure messages. An attacker could possibly use this issue\nto leak sensitive information. This issue only affected\nUbuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2022-47952)\n\nSam Sanoop discovered that LXC did not correctly handle certain forms\nof user authorization. An attacker could possibly use this issue to\ncause a denial of service. (CVE-2026-39402)","dates":{"published":"2026-09-28T05:47:13.000Z","modified":"2026-09-28T11:42:42.453Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"lxc","name":"lxc","label":"lxc","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/lxc","purlType":"deb","versions":[{"text":"< 2.0.11-0ubuntu1~16.04.3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.0.3-0ubuntu1~18.04.3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:4.0.12-0ubuntu1~20.04.1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:5.0.0~git2209-g5a7b9ce67-0ubuntu1.1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:5.0.3-2ubuntu7.3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:6.0.6-1ubuntu1+esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.11-0ubuntu1~16.04.3+esm1 | < 3.0.3-0ubuntu1~18.04.3+esm1 | < 1:4.0.12-0ubuntu1~20.04.1+esm1 | < 1:5.0.0~git2209-g5a7b9ce67-0ubuntu1.1+esm1 | < 1:5.0.3-2ubuntu7.3+esm1 | < 1:6.0.6-1ubuntu1+esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8826-1","label":"ubuntu.com/security/notices/USN-8826-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-47952","label":"ubuntu.com/security/CVE-2022-47952","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-39402","label":"ubuntu.com/security/CVE-2026-39402","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2022-47952","CVE-2026-39402"],"downstream":[],"duplicates":[],"related":["CVE-2022-47952","CVE-2026-39402"]},"timeline":[{"kind":"published","date":"2026-09-28T05:47:13.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-28T11:42:42.453Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T19:52:00.754Z","stale":false,"partial":false}}