lxclock.c in LXC 1.1.2 and earlier allows local users to create arbitrary files via a symlink attack on /run/lock/lxc/*.
{ "binaries": [ { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "liblxc1" }, { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "lxc" }, { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "lxc-dev" }, { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "lxc-templates" }, { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "lxc-tests" }, { "binary_version": "1.0.7-0ubuntu0.2", "binary_name": "python3-lxc" } ], "availability": "No subscription required" }