8.5
Élevée
CVE-2026-95702 Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local…
Description
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gvisor 20260831.0 | premières → < 20260831.0 | 20260831.0 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Gvisor
Les 6 CVE de Gvisor →
CVE-2026-96812
Improper Exposure of Resource to Wrong Sphere in the host file helper (gofer) in Google gVisor prior to commit…
8.8
Élevée
CVE-2025-2713
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file…
6.8
Moyenne
CVE-2024-10603
Weaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to…
6.3
Moyenne
CVE-2024-10026
A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to…
6.3
Moyenne