CVE-2015-8222: Canonical Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The lxd-unix.socket systemd unit file in the Ubuntu lxd package before 0.20-0ubuntu4.1 uses world-readable permissions for /var/lib/lxd/unix.socket, which allows local users to gain privileges via unspecified vectors.

Affected products

• Canonical Ubuntu Linux: version 15.10 only

Published 2015-11-17. Last modified 2026-06-17.