CVE-2026-48754 | lxc incus up to 7.0.0 createDependentVolumesFromBackup null pointer dereference

June 30, 2026 Yanac

A vulnerability was found in lxc incus up to 7.0.0 and classified as problematic. Affected by this vulnerability is the function createDependentVolumesFromBackup. Executing a manipulation can lead to null pointer dereference.

This vulnerability is registered as CVE-2026-48754. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More