{
  "cveId": "CVE-2026-63295",
  "url": "https://patchblox.com/security/cve/CVE-2026-63295",
  "summary": "CVE-2026-63295 is fixed in lxd on 1 platform by OPENSUSE-SU-2026:21788-1 (version 5.21.6-bp160.1.1), released September 2, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "lxd: This update for lxd fixes the following issues:\n\nChanges in lxd:\n\n- update to 5.21.6:\n  * bsc#1274937, CVE-2026-63293...",
  "description": "This update for lxd fixes the following issues:\n\nChanges in lxd:\n\n- update to 5.21.6:\n  * bsc#1274937, CVE-2026-63293, bsc#1274936, CVE-2026-62420,\n    bsc#1274954, CVE-2026-63295, bsc#1274963, CVE-2026-63297,\n    bsc#1274961, CVE-2026-63296, bsc#1275085, CVE-2026-63299,\n    bsc#1275084, CVE-2026-63298, bsc#1275090, CVE-2026-66898\n  * https://canonical.com/lxd/docs/latest/reference/release-\n    notes/5.21/release-notes-5.21.6/\n  * https://canonical.com/lxd/docs/latest/reference/release-\n    notes/5.21/release-notes-5.21.5/\n  * https://discourse.ubuntu.com/t/lxd-5-21-4-lts-has-been-\n    released/66602\n  * https://discourse.ubuntu.com/t/lxd-5-21-3-lts-has-been-\n    released/53768\n  * https://discourse.ubuntu.com/t/lxd-5-21-2-has-been-\n    released/46443\n\n- Migrate to single LXD/Incus OVMF handling (lxd-ovmf-setup):\n  * Allow aarch64 arch_vm_support\n  * Remove OVMF symlinks\n  * Require the new lxd-ovmf-setup packages",
  "published": "2026-09-02T12:35:45Z",
  "severity": "",
  "epss": 0.00349,
  "epssPercentile": 0.28711,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "lxd",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.21.6-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21788-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21788-1",
      "released": "2026-09-02T12:35:45Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}