CVE-2026-40197 | lxc incus up to 6.x srcBackup.Config.VolumeSnapshots null pointer dereference (GHSA-r7w7-mmxr-47r9)

A vulnerability was found in lxc incus up to 6.x and classified as problematic. Affected by this issue is the function srcBackup.Config.VolumeSnapshots. Such manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-40197. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.