Back Linuxsecurity

Mageia 9 lxc CVE-2026-39402 Important Insufficient Validation 2026

Linuxsecurity •LinuxSecurity Advisories • June 4, 2026

Description: CVE-2026-39402, lxc lxc-user-nic insufficient ownership validation allows cross-tenant OVS port deletion

- - - -

Warning : Undefined array key "block" in /var/www/ on line 17 Warning : Undefined array key "block" in /var/www/ on line 21 Warning : foreach() argument must be of type array|object, null given in /var/www/ on line 21

- 9/core/lxc-5.0.3-1.1.mga9

Publication date: 04 Jun 2026 URL: https: //advisories.mageia.org/MGASA-2026-0172.html Type: security CVE: CVE-2026-39402

Get the latest Linux and open source security news straight to your inbox.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Mageia 9 LXC CVE-2026-39402 Insufficient Validation Vulnerability CVE-2026-39402, affecting Mageia 9's LXC component, allows insufficient ownership validation, enabling cross-tenant OVS port deletion. This vulnerability poses a significant risk as it could allow unauthorized users to manipulate network resources. The flaw was published on May 5, 2026, and affects systems running LXC version 5.0.3-1.1.mga9. Users are advised to apply patches to mitigate the risk. The advisory highlights the importance of validating user permissions in multi-tenant environments. Current status indicates that the vulnerability is known but may not yet be actively exploited. Organizations using Mageia 9 should prioritize updates to secure their systems. 8 sources 58

Extracted Entities

Mageia 9 lxc CVE-2026-39402 Important Insufficient Validation 2026

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

Domains (1)

Platforms (2)