criu vulnerabilities

CVEs whose affected-version data names the criu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18107High· 7.8PoC

3mo ago

Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, al…

▾ MidnightRed Hat · criuEPSS 0.15%via CVEORG