CVE-2015-1334: attach.c in LXC 1.1.2 and earlier uses the proc filesystem in a container, which allows local container use...

Security readout for executives and security teams

CVE-2015-1334 is a container isolation weakness in LXC 1.1.2 and earlier. A local user inside a container may bypass AppArmor or SELinux confinement under specific conditions. The business risk is highest where LXC containers host untrusted users or workloads on shared Linux hosts. Exposure is likely limited to environments running LXC 1.1.2 or earlier, especially multi-tenant or untrusted container workloads using AppArmor or SELinux confinement. The structured affected-product data is incomplete, so inventory should rely on LXC package versions and distro advisories. Treat this as high priority for legacy LXC estates and shared container platforms. It is less urgent for environments without affected LXC versions or untrusted local container users, but the incomplete version metadata warrants prompt inventory validation. Mitigation focus: Identify hosts running LXC 1.1.2 or earlier.; Apply vendor security updates from Debian, Ubuntu, openSUSE, or your distribution.; Review the upstream LXC commit and vendor advisories for fixed package guidance..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.