Affected by GO-2026-5252
and 9 other vulnerabilities
GO-2026-5252: Incus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted) in github.com/lxc/incus
GO-2026-5798: Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image in github.com/lxc/incus
GO-2026-5799: Incus has a restricted project bypass leading to arbitrary command execution in github.com/lxc/incus
GO-2026-5800: Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool} in github.com/lxc/incus
GO-2026-5801: Incus has an arbitrary file write on host via `exec-output` symlink in crafted image in github.com/lxc/incus
GO-2026-5802: Incus has an arbitrary file write via path traversal in S3 multipart upload in github.com/lxc/incus
GO-2026-5803: Incus has arbitrary file read+write on host via templates/ symlink in malicious image in github.com/lxc/incus
GO-2026-5806: Incus has an arbitrary file write on its client due to trusted image hash in github.com/lxc/incus
GO-2026-5808: Incus has an argument injection in backup compression algorithm leading to AFW and ACE in github.com/lxc/incus
GO-2026-5810: Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at (sibling-field variant of GHSA-r7w7) in github.com/lxc/incus
Lock creates a named lock to allow activities that require exclusive access to occur.
Will block until the lock is established or the context is cancelled.
On successfully acquiring the lock, it returns an unlock function which needs to be called to unlock the lock.
If the context is canceled then nil will be returned.
TryLock creates a named lock for activities that require exclusive access.
It does not block if the lock is already held.
If the lock is acquired successfully, it returns an unlock function that
must be called to release the lock.
Affected by 
Documentation
¶
Source Files