Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the CRImportCheckpoint function in containercheckpointlinux.go, which restores a container from checkpoint data without enforcing the destination CRI ContainerConfig, so CRIU reinstates process credentials,...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the CRImportCheckpoint function in containercheckpointlinux.go, which restores a container from checkpoint data without enforcing the destination CRI ContainerConfig, so CRIU reinstates process credentials,...

CVE-2026-95837

containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a...