Linux Distros Unpatched Vulnerability : CVE-2026-93318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised...

CVE-2026-93320

BuildKit may be tricked into performing file actions with special file...

CVE-2026-93316

If BuildKit daemon is started with --cdi-disabled it can lead to daemo...

CVE-2026-93319

A malicious external BuildKit frontend can send requests using the int...

CVE-2026-93322

A malicious frontend can submit an LLB definition that causes buildkit...

Linux Distros Unpatched Vulnerability : CVE-2026-93320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootfu...

Linux Distros Unpatched Vulnerability : CVE-2026-93316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident...

Linux Distros Unpatched Vulnerability : CVE-2026-93319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to...

CVE-2026-93315

The BuildKit build engine is vulnerable to a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) when using proxy networking with CA injection. A build step can modify the CA bundle before the cleanup process occurs, potentially causing the cleanup to block, execute outside the build root...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-93315 BuildKit proxy CA cleanup can be disrupted by build steps

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

CVE-2026-97275

Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data Manipulation.This issue affects BuildKit – Product Builder for WooCommerce – Custom PC Builder: from n/a through 1.0....

CVE-2026-93322

A flaw was found in BuildKit. This vulnerability can lead to a Denial of Service DoS when a malicious build frontend submits a specially crafted low-level builder LLB definition. Processing this definition causes the build daemon to panic and terminate unexpectedly, interrupting all active build...

CVE-2026-93319

A flaw was found in BuildKit. An attacker using a malicious external build frontend can trigger a Denial of Service DoS by sending requests through the internal API. This request sequence induces a data race condition, causing the BuildKit daemon to crash unexpectedly and interrupt build processe...

CVE-2026-93317

A flaw was found in BuildKit. An unauthenticated remote attacker controlling a container registry or Open Container Initiative OCI blob source can provide data that does not match its claimed cryptographic digest. Because BuildKit caches the resulting snapshot under the claimed digest, subsequent...

CVE-2026-93316

A flaw was found in BuildKit. This vulnerability allows an authenticated user to cause a Denial of Service DoS by crashing the daemon. When the BuildKit daemon is started with Container Device Interface CDI support disabled, submitting a build that attempts to use CDI devices triggers an unhandle...

CVE-2026-93320

A flaw was found in BuildKit. This vulnerability allows an attacker to trick the build engine into performing file operations on special file inodes where regular files are expected. By providing a crafted build context, an attacker can block build operations leading to a Denial of Service DoS or...

CVE-2026-93320

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93318

A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actual layer contents. If a BuildKit daemon with...