OESA-2026-2557 kata-containers security update

This is core component of Kata Container, to make it work, you need a isulad/docker engine. Security Fixes: 'This vulnerability was fixed in Kata Containers 3.31.0:', 'Description:\n\nIn the runtime-rs standalone virtio-fs path, Kata Containers runs virtiofsd\nas root with --sandbox none --seccom...

CVE-2026-47243

creationtimestamp| type| source ---|---|--- 2026-05-21 18:26:35+00:00| published-proof-of-concept| https://github.com/kata-containers/kata-containers/security/advisories/GHSA-2gv2-cffp-j227 2026-05-21 19:08:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mmf4lcuoc42m 2026-05-...

PT-2026-42534

Name of the Vulnerable Software and Affected Versions Kata Containers runtime-rs versions prior to 3.31.0 Description A symlink escape exists when virtiofsd is run as root with the flags --sandbox none and --seccomp none. A raw FUSE SYMLINK request allows a guest root user to create symlinks owne...