docker_escape_pwn

Escape from Docker using CVE-2017-1000112 and CVE-2017-18344. Including: gaining root privilage get all capbilities namespace recovery filesystem recovery cgroup limitation bypass seccomp bypass...

CVE-2026-61711

A flaw was found in BuildKit. A custom frontend could craft a build request with an invalid security mode, leading to the disabling of Seccomp and AppArmor protections for the build container. This bypasses the intended sandbox mechanisms, potentially allowing for broader impact within the...

Astra Linux – Vulnerability in libseccomp

In versions of libsseccomp before 2.4.0, 64-bit syscall argument comparisons using arithmetic operators LT, GT, LE, GE were not generated correctly. This issue could potentially allow bypassing seccomp filters and leading to potential privilege escalations...

Astra Linux – Vulnerability in Linux 5.10, Linux

The Linux kernel before version 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass the intended restrictions on setting the PTSUSPENDSECCOMP flag...

Improper Validation of Specified Type of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input in client/llb/exec.go and executor/oci/speclinux.go. An attacker can disable Seccomp and AppArmor protections for a build container by supplying a crafted build request with an invalid...

BuildKit: Custom frontend could bypass Seccomp/AppArmor

Impact A custom frontend could send a crafted build request that disabled Seccomp and AppArmor protections for the build container, even if the user did not explicitly allow the security.insecure entitlement. Other security measures, like Linux capabilities were still applied to these containers...

AZL-97032 CVE-2026-61711 affecting package moby-engine 25.0.3-19

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-61711

In BuildKit versions prior to 0.31.1, the file executor/oci/spec_linux.go treated an invalid SecurityMode value from a crafted build request as non-sandbox mode without requiring the security.insecure entitlement, disabling Seccomp and AppArmor protections for the build container. Linux capabilit...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-61711 BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

EUVD-2026-62838

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...

CVE-2026-68171

A flaw was found in the Linux kernel's arm64 syscall handling. A local attacker with the ability to trace processes using ptrace could manipulate syscall arguments after security checks like seccomp, or secure computing mode have been performed. This occurs because the kernel's internal record of...

NewStart CGSL MAIN 6.06 (SP) : docker-ce Multiple Vulnerabilities (NS-SA-2026-0011)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has docker-ce packages installed that are affected by multiple vulnerabilities: - runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001665)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001665 advisory. In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004429)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004429 advisory. In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead t...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003892)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003892 advisory. In the seccomp implementation prior to kernel version 4.8, there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001883 advisory. arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002010)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002010 advisory. arch/mips/include/asm/threadinfo.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure TIFSECCOMP checks on the fast system-call path, which...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001711)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001711 advisory. The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACESEIZE code path allows attackers to bypass intended restrictions on setting the...