Affected by GO-2025-4115 and 21 other vulnerabilities

GO-2025-4115: Incus vulnerable to local privilege escalation through custom storage volumes in github.com/lxc/incus

GO-2026-4357: Incus container image templating arbitrary host file read and write in github.com/lxc/incus

GO-2026-4359: Incus container environment configuration newline injection in github.com/lxc/incus

GO-2026-5127: Incus Vulnerable to Panic via Snapshot Bounds Check in github.com/lxc/incus

GO-2026-5168: Incus has Unbounded YAML Metadata Decode via Parsing in github.com/lxc/incus

GO-2026-5252: Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus

GO-2026-5254: Incus has Blind SSRF via Image Import Preflight HEAD in github.com/lxc/incus

GO-2026-5280: Incus is affected by unbounded binary import disk exhaustion in github.com/lxc/incus

GO-2026-5319: Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots in github.com/lxc/incus

GO-2026-5384: Incus has Nil-Pointer Dereference via S3 Bucket Import in github.com/lxc/incus

GO-2026-5397: Incus has a Nil-Pointer Dereference Panic via Bucket Metadata in github.com/lxc/incus

GO-2026-5612: Incus has a Nil-Pointer Dereference via Custom Volume Import in github.com/lxc/incus

GO-2026-5742: Incus has Nil Dereferences on Restore via Malformed YAML in github.com/lxc/incus

GO-2026-5798: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image in github.com/lxc/incus

GO-2026-5799: Incus has a restricted project bypass leading to arbitrary command execution in github.com/lxc/incus

GO-2026-5800: Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} in github.com/lxc/incus

GO-2026-5801: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus

GO-2026-5802: Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus

GO-2026-5803: Incus has arbitrary file read+write on host via templates/ symlink in malicious image in github.com/lxc/incus

GO-2026-5806: Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus

GO-2026-5808: Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus

GO-2026-5810: Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus

The highest tagged major version is v7.

edk2

package

v6.23.0 Latest Latest Go to latest Published: Mar 27, 2026 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/lxc/incus

Links

Open Source Insights

Documentation ¶

Rendered for

Index ¶

func GetenvEdk2Path() (string, error)
type FirmwarePair
- func GetArchitectureFirmwarePairs(hostArch int) ([]FirmwarePair, error)
- func GetArchitectureFirmwarePairsForUsage(hostArch int, usage FirmwareUsage) ([]FirmwarePair, error)
type FirmwareUsage
type Installation
- func GetArchitectureInstallations(hostArch int) []Installation

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GetenvEdk2Path ¶

func GetenvEdk2Path() (string, error)

GetenvEdk2Path returns the environment variable for overriding the path to use for EDK2 installations.

Types ¶

type FirmwarePair ¶

type FirmwarePair struct {
	Code string
	Vars string
}

FirmwarePair represents a combination of firmware code (Code) and storage (Vars).

func GetArchitectureFirmwarePairs ¶ added in v6.0.4

func GetArchitectureFirmwarePairs(hostArch int) ([]FirmwarePair, error)

GetArchitectureFirmwarePairs creates an array of FirmwarePair for a specific host architecture. If the environment variable INCUS_EDK2_PATH has been set it will override the default installation path when constructing Code & Vars paths.

func GetArchitectureFirmwarePairsForUsage ¶

func GetArchitectureFirmwarePairsForUsage(hostArch int, usage FirmwareUsage) ([]FirmwarePair, error)

GetArchitectureFirmwarePairsForUsage creates an array of FirmwarePair for a specific host architecture and usage combination. If the environment variable INCUS_EDK2_PATH has been set it will override the default installation path when constructing Code & Vars paths.

type FirmwareUsage ¶

type FirmwareUsage int

FirmwareUsage represents the situation in which a given firmware file will be used.

const (
	// GENERIC is a generic EDK2 firmware.
	GENERIC FirmwareUsage = iota

	// SECUREBOOT is a UEFI Secure Boot enabled firmware.
	SECUREBOOT

	// CSM is a firmware with the UEFI Compatibility Support Module enabled to boot BIOS-only operating systems.
	CSM
)

type Installation ¶

type Installation struct {
	Path  string
	Usage map[FirmwareUsage][]FirmwarePair
}

Installation represents a set of available firmware at a given location on the system.

func GetArchitectureInstallations ¶

func GetArchitectureInstallations(hostArch int) []Installation

GetArchitectureInstallations returns an array of installations for a specific host architecture.

Source Files ¶

View all Source files

driver_edk2.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL