Threats Tagged 'ghsa-p7v4-vr35-mj6f'
View all threats tagged with 'ghsa-p7v4-vr35-mj6f'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-p7v4-vr35-mj6f'
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability in containerd's CRI plugin allows containers restored from untrusted checkpoints via the CreateContainer API to bypass the destination security context, resulting in elevated privileges. The checkpoint restore process restores process credentials and security settings directly from checkpoint data without enforcing the container's configured security policies. This can enable an attacker to execute processes as root with full capabilities and no seccomp filters despite restrictive orchestrator policies. The issue affects Linux systems running containerd with CRI checkpoint restore enabled. The vulnerability is fixed by disabling checkpoint restore via CreateContainer by default in containerd 2.2.7 and 2.3.4, and the feature was removed entirely in 2.4.0. Users should update to these versions and recreate containers restored from untrusted checkpoints. Join the discussion | GCVE Database | 10/15/2026, 20:21:57 UTC Added: 10/15/2026, 22:07:08 UTC |
Showing 1 to 1 of 1 result