containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-53495US | — | — | ||
containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled can indefinitely block the drainExecSyncI… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/containerd/containerd/releases/tag/v1.7.35WEB
- https://github.com/containerd/containerd/releases/tag/v2.0.12WEB
- https://github.com/containerd/containerd/releases/tag/v2.2.8WEB
- https://github.com/containerd/containerd/releases/tag/v2.3.5WEB
- https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqvADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan