TI-2025-29821 Aliases CVE-2025-47291 GHSA-cxfp-7pvr-95ff

containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.

LOW 21CWE-266Published 2025-05-21 · Updated 2025-05-21

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Privilege escalation
Confidentiality · integrity · availability: None · None · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-266.

Summary

containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. As a workaround, disable usernamespaced pods in Kubernetes temporarily.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0029 21st percentileScored 2026-11-07

Fix Fixed containerd (containerd): 2.0.5github.com/containerd/containerd/v2 (Go): 2.0.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
backstage	containerd	2.0.1 to before 2.0.5	2.0.5	Patch available	CNA
—	github.com/containerd/containerd/v2 (Go)	2.0.1 to before 2.0.5	2.0.5	Patch available	GHSA-cxfp-7pvr-95ff

containerd Vendorbackstage Affected 2.0.1 to before 2.0.5 Fixed in 2.0.5 Patch available CNA
github.com/containerd/containerd/v2 (Go) Vendor— Affected 2.0.1 to before 2.0.5 Fixed in 2.0.5 Patch available GHSA-cxfp-7pvr-95ff

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:linuxfoundation:containerd::::::::	2.0.1 to before 2.0.5	Vulnerable	backstage

cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:* Versions 2.0.1 to before 2.0.5 Vulnerable ·backstage

Remediation

Fix · CNA containerd (containerd) Fixed in 2.0.5
Fix · GHSA-cxfp-7pvr-95ff github.com/containerd/containerd/v2 (Go) Fixed in 2.0.5 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Not affected: 20 products

Assisted Installer for Red Hat OpenShift Container Platform 2
Deployment Validation Operator
Gatekeeper 3
Logging Subsystem for Red Hat OpenShift
Migration Toolkit for Virtualization
Multicluster Engine for Kubernetes
OpenShift API for Data Protection
OpenShift Developer Tools and Services
OpenShift Serverless
OpenShift Service Mesh 3
Red Hat Advanced Cluster Management for Kubernetes 2
Red Hat Advanced Cluster Security 4
Red Hat OpenShift AI (RHOAI)
Red Hat OpenShift Container Platform 4
Red Hat OpenShift GitOps
Red Hat OpenShift Virtualization 4
Red Hat OpenShift for Windows Containers
Red Hat OpenStack Platform 18.0
Red Hat Openshift Sandboxed Containers
Red Hat Trusted Application Pipeline

Timeline

2026-10-02 Threatist record created from CVE-2025-47291
2026-10-03 Alias added: GHSA-cxfp-7pvr-95ff

References

Advisory 2

Other 2

TI-2021-19622 Improper Preservation of Permissions in containerd CVSS 3.1CRITICAL 9.1
TI-2023-10635 containerd supplementary groups are not set up properly CVSS 3.1HIGH 7.8
TI-2022-07700 Insecure handling of image volumes in containerd CRI plugin CVSS 3.1HIGH 7.5
TI-2026-38567 Improper input validation in backstage containerd CVSS 4.0CRITICAL 9.4
TI-2026-38569 containerd CRI checkpoint restore CDI annotation smuggling CVSS 4.0HIGH 8.4
TI-2025-29820 Containerd vulnerable to host filesystem access during image unpack CVSS 4.0HIGH 7.6

See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences