8.8
Élevée
CVE-2026-24054 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
Description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In versions prior to 3.26.0, when a container image is malformed or contains no layers, containerd falls back to bind-mounting an empty snapshotter directory for the container rootfs. When the Kata runtime attempts to mount the container rootfs, the bind mount causes the rootfs to be detected as a block device, leading to the underlying device being hotplugged to the guest. This can cause filesystem-level errors on the host due to double inode allocation, and may lead to the host's block device being mounted as read-only. Version 3.26.0 contains a patch for the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kata-containers 3.26 | premières → < 3.26.0 | 3.26.0 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de kata-containers
Les 8 CVE de kata-containers →
CVE-2026-64676
Kata Containers is an open source implementation of lightweight Virtual Machines (VMs) that perform like containers
5.7
Moyenne
CVE-2026-47243
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
9.2
Critique
CVE-2026-50540
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
9.6
Critique
CVE-2026-44210
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
5.8
Moyenne