lxc — Vulnerabilities & Security Advisories 41

LXC provides OS-level virtualization for running multiple isolated Linux systems on a single host. Historically, common vulnerabilities include remote code execution through container breakout flaws, privilege escalation via improper access controls, and cross-container information leaks. Notable security characteristics include its lightweight nature compared to full virtualization, though this can reduce isolation. Major incidents include CVE-2014-3707 allowing privilege escalation and CVE-2016-1587 enabling container escapes. With 22 CVEs on record, security risks often stem from misconfigurations or kernel vulnerabilities affecting container isolation. Proper hardening and kernel updates remain critical for secure deployment.