15008 matches found
AZL-106821 CVE-2026-93321 affecting package moby-engine 25.0.3-20
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
UBUNTU-CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93321 Malformed LLB file operation can crash buildkitd
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93321
The buildkitd daemon is vulnerable to a crash caused by the submission of a malformed LLB definition from a malicious frontend. This issue, rooted in improper validation of an array index (CWE-129), leads to a panic that terminates the daemon and interrupts all active builds. The vulnerability is...
CVE-2026-93321 Malformed LLB file operation can crash buildkitd
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
EUVD-2026-92820
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93321 Malformed LLB file operation can crash buildkitd
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93316
A flaw was found in BuildKit. This vulnerability allows an authenticated user to cause a Denial of Service DoS by crashing the daemon. When the BuildKit daemon is started with Container Device Interface CDI support disabled, submitting a build that attempts to use CDI devices triggers an unhandle...
AZL-106815 CVE-2026-93322 affecting package moby-engine 25.0.3-20
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
CVE-2026-93322
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
AZL-106809 CVE-2026-93319 affecting package moby-engine 25.0.3-20
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...
CVE-2026-93319
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...
CVE-2026-93316
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...
CVE-2026-93322
The buildkitd daemon is vulnerable to a Denial of Service (DoS) condition where a malicious frontend can submit a malformed LLB definition (specifically involving a malformed MergeOp ). This input causes the daemon to panic and terminate , which interrupts all active builds running on that daemon...
CVE-2026-93322 Malformed MergeOp can crash the BuildKit daemon
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...
EUVD-2026-92542
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon...