Threats affecting pkg:github/gVisor

CVE-2026-95702 is a use-after-free vulnerability in the virtual file system (VFS) component of Google gVisor prior to release 20260831.0. It allows a local attacker with standard container privileges to execute code in the host sentry process by triggering a double-free of the backing MemoryFile in an in-sandbox overlay filesystem. The sentry process remains confined by Linux seccomp and namespace boundaries on the host.

CVE-2026-96812 is a high-severity vulnerability in Google gVisor affecting Linux platforms with CUSE enabled. It allows a local attacker with container image deployment privileges to achieve root code execution on the host by improperly exposing a /dev/cuse character device node from a container to the host. This exposure enables the attacker to register a host device and exploit unrestricted ioctl handling to overwrite root udev helper memory.