Read the docs
TI-2026-71247 Aliases CVE-2026-95837GHSA-p7v4-vr35-mj6f

CRI checkpoint restore in containerd bypasses security context

Priority LOW 35CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-269.

Summary

containerd from 2.1.0 before 2.2.7 and from 2.3.0 before 2.3.4 restores process security state from CRIU checkpoint data instead of enforcing the destination ContainerConfig (CWE-269). An attacker who can create a container from a crafted checkpoint can run the restored process as root with full capabilities and no enforced seccomp filters, while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a container from a crafted checkpoint can supply restored credentials, capabilities, no_new_privs, and seccomp state. The restored process can run as root with full capabilities and no enforced seccomp filters while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected. This issue is fixed in versions 2.2.7 and 2.3.4.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00106 1st percentileScored 2026-11-07
Fix Fixed containerd (containerd): 2.2.7, 2.3.4github.com/containerd/containerd/v2 (Go): 2.2.7, 2.3.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
backstagecontainerd2.1.0 to before 2.2.7; 2.3.0 to before 2.3.42.2.7, 2.3.4Patch availableCNA
—github.com/containerd/containerd/v2 (Go)2.1.0 to before 2.2.72.2.7Patch availableGHSA-p7v4-vr35-mj6f
—github.com/containerd/containerd/v2 (Go)2.3.0 to before 2.3.42.3.4Patch availableGHSA-p7v4-vr35-mj6f
  • containerd Vendorbackstage Affected 2.1.0 to before 2.2.7; 2.3.0 to before 2.3.4 Fixed in 2.2.7, 2.3.4 Patch available CNA
  • github.com/containerd/containerd/v2 (Go) Vendor— Affected 2.1.0 to before 2.2.7 Fixed in 2.2.7 Patch available GHSA-p7v4-vr35-mj6f
  • github.com/containerd/containerd/v2 (Go) Vendor— Affected 2.3.0 to before 2.3.4 Fixed in 2.3.4 Patch available GHSA-p7v4-vr35-mj6f

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*——backstage
  • cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:* Versions — — ·backstage

Remediation

Upgrade containerd to 2.2.7 or 2.3.4, the versions that fix this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA containerd (containerd) Fixed in 2.2.7, 2.3.4
  • Fix · GHSA-p7v4-vr35-mj6f github.com/containerd/containerd/v2 (Go) Fixed in 2.2.7 Advisory →
  • Fix · GHSA-p7v4-vr35-mj6f github.com/containerd/containerd/v2 (Go) Fixed in 2.3.4 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat Hardened Images

Timeline

  1. 2026-10-12 Threatist record created from CVE-2026-95837
  2. 2026-10-13 Priority changed: MEDIUM → LOW
  3. 2026-10-13 CISA SSVC decision points changed
  4. 2026-10-16 Alias added: GHSA-p7v4-vr35-mj6f
  5. 2026-10-16 Fix available: Go/github.com/containerd/containerd/[email protected], Go/github.com/containerd/containerd/[email protected] · GHSA-p7v4-vr35-mj6f
  6. 2026-10-16 CVSS score added · GHSA-p7v4-vr35-mj6f
  7. 2026-10-16 Weakness changed · GHSA-p7v4-vr35-mj6f
  8. 2026-10-16 5 new references · GHSA-p7v4-vr35-mj6f
  9. 2026-10-18 Affected versions changed · Red Hat
  10. 2026-10-18 CVSS score added · Red Hat

References

Advisory 1

Other 4

  • TI-2026-33119 Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys KEVCVSS 3.1CRITICAL 9.6
  • TI-2018-10499 Integer overflow in backstage kernel KEVCVSS 3.0HIGH 7.8
  • TI-2024-08998 Remote Code Execution in kedro-org/kedro CVSS 3.0CRITICAL 9.8
  • TI-2023-12294 Dragonfly2 vulnerable to hard coded cyptographic key CVSS 3.1CRITICAL 9.8
  • TI-2021-12074 Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via… CVSS 3.1CRITICAL 9.8
  • TI-2019-04061 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows… CVSS 3.1HIGH 8.6
See all 662 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences