8.2Yüksek

CVE-2026-8936Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

Docker Docker Desktop Yayım: 2026-06-03 00:09 (5 ay önce)

Açıklama

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0.

Zayıflık türü (CWE): CWE-674

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Docker	Docker Desktop	4.33.0 – < 4.76.0

Kaynaklar ve yamalar

https://docs.docker.com/desktop/release-notes/#4760

CVSS puanı

8.2Yüksek

Kaynak: Docker · CVSS 4.0

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Ön koşul: Yok
Gereken yetki: Düşük
Kullanıcı etkileşimi: Gerekmez
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/R:U

Tüm puanlar (2)

cna	CVSS 4.0	8.2Yüksek
security@docker.com	CVSS 4.0	8.2Yüksek

EPSS (30 günde istismar olasılığı)

0.11%

tüm CVE'lerin %2'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: no
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2026-05-19
Yayımlandı2026-06-03 00:09
IP-DB'ye ulaştı2026-10-24 23:40
Son güncelleme2026-07-22 22:10

Numarayı veren (CNA): Docker
NVD durumu: Awaiting Analysis

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Docker / Moby

4.5Orta

CVE-2026-121520 4 gün önce

Malicious client could set xattr value outside of BuildKit state directory

Moby BuildKit

In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit a build request that sets an extended attribute on a file outside the BuildKit state directory. Extended attributes in the trusted. or security. name…

6.7Orta

CVE-2026-121522 4 gün önce

Possible panic from Git source resolver

moby BuildKit

In BuildKit versions v0.26.0 through v0.34.1, a specific build definition that resolves metadata for the same Git source reference twice can cause the BuildKit daemon to panic and crash, interrupting builds handled by that daemon. The issue is fixed in v0.34.2.

5.6Orta

CVE-2026-121541 4 gün önce

Bake filesystem path entitlements approval can be skipped in some multi-target builds

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some …

1.8Düşük

CVE-2026-121542 4 gün önce

Bake filesystem path entitlements approval can be skipped for path using basename prefix

Docker Docker Buildx

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working dire…

7.1Yüksek

CVE-2026-121614 4 gün önce

Docker Sandboxes host Git executes repository-controlled programs

Docker Docker Sandboxes

Docker Sandboxes versions 0.31.0 before 0.50.0 do not neutralize repository-controlled Git configuration when running certain host-side Git commands. An attacker who can modify a host repository's Git configuration, for example through a direct-mode sandbox w…

7.3Yüksek

CVE-2026-93325 4 gün önce

Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx

Docker Docker Buildx

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped.