CVE-2017-5985: Linuxcontainers Lxc

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check.

Affected products

  • Linuxcontainers Lxc: up to and including 1.0.9; from 2.0.0, up to and including 2.0.6

Published 2017-03-14. Last modified 2026-06-17.