Canonical » Ubuntu Linux » 20.04 : Security Vulnerabilities, CVEs,

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate their privilege to root without requiring a sudo password.

It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.