CVE-2026-95837
Fixed in a distro release EPSS <1%CVSS 7.8
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a container from a crafted checkpoint can supply restored credentials, capabilities, no_new_privs, and seccomp state. The restored process can run as root with full capabilities and no enforced seccomp filters while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected. This issue is fixed in versions 2.2.7 and 2.3.4.
Products: containerd
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/containerd/containerd | no fix |
| Go | github.com/containerd/containerd/v2 | 2.2.7 |
| Go | github.com/containerd/containerd/v2 | 2.3.4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | amazon-ecs-agent | no fix |
| Chainguard | amazon-ecs-agent | 0 |
| Chainguard | amazon-ecs-agent-fips | no fix |
| Chainguard | chaos-mesh | no fix |
| Chainguard | chaos-mesh-daemon | no fix |
| Chainguard | chaos-mesh-dashboard | no fix |
| Chainguard | chaos-mesh-fips | 0 |
| Chainguard | chaos-mesh-fips-daemon | 0 |
| Chainguard | chaos-mesh-fips-dashboard | 0 |
| Chainguard | chartmuseum | no fix |
| Chainguard | chartmuseum-fips | 0 |
| Chainguard | cluster-api-helm-controller | 0 |
| Chainguard | cluster-api-helm-controller-fips | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.2 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.3 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.4 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.5 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | 0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.4 | no fix |
| Chainguard | commercial-gitlab-rails-ee-fips-19.5 | no fix |
| Chainguard | consul-k8s-1.1-cli | no fix |
| Chainguard | consul-k8s-1.3-cli | no fix |
| Chainguard | consul-k8s-1.4-cli | no fix |
| Chainguard | consul-k8s-1.5-cli | no fix |
| Chainguard | consul-k8s-1.6-cli | no fix |
| Chainguard | consul-k8s-1.7-cli | no fix |
| Chainguard | consul-k8s-fips-1.1-cli | no fix |
| Chainguard | consul-k8s-fips-1.3-cli | no fix |
| Chainguard | consul-k8s-fips-1.4-cli | no fix |
| Chainguard | consul-k8s-fips-1.5-cli | no fix |
| Chainguard | consul-k8s-fips-1.6-cli | no fix |
| Chainguard | consul-k8s-fips-1.7-cli | no fix |
| Chainguard | containerd-1 | no fix |
| Chainguard | containerd-2.1 | no fix |
| Chainguard | containerd-shim-runc-v2-1 | no fix |
| Chainguard | containerd-shim-runc-v2-2.1 | no fix |
| Chainguard | containerd-stress-1 | no fix |
| Chainguard | containerd-stress-2.1 | no fix |
| Chainguard | crossplane-cli-2.3 | no fix |
| Chainguard | crossplane-cli-2.4 | no fix |
| Chainguard | crossplane-cli-fips-2.3 | no fix |
| Chainguard | crossplane-cli-fips-2.4 | no fix |
| Chainguard | ctr-1 | no fix |
| Chainguard | ctr-2.1 | no fix |
| Chainguard | datadog-agent-7.78 | no fix |
| Chainguard | datadog-agent-7.79 | 0 |
| Chainguard | datadog-agent-7.80 | 0 |
| Chainguard | datadog-agent-7.81 | 0 |
| Chainguard | datadog-agent-7.82 | no fix |
| Chainguard | datadog-agent-fips-7.78 | no fix |
| Chainguard | datadog-agent-fips-7.79 | no fix |
| Chainguard | datadog-agent-fips-7.80 | no fix |
| Chainguard | datadog-agent-fips-7.81 | no fix |
| Chainguard | dockerd-28 | no fix |
| Chainguard | dockerd-fips-28 | no fix |
| Chainguard | dogstatsd-7.78 | no fix |
| Chainguard | dogstatsd-7.79 | 0 |
| Chainguard | dogstatsd-7.80 | no fix |
| Chainguard | dogstatsd-7.80 | 0 |
| Chainguard | dogstatsd-7.81 | 0 |
| Chainguard | dogstatsd-7.82 | no fix |
| Chainguard | eksctl | no fix |
| Chainguard | envoy-gateway-1.6-egctl | no fix |
| Chainguard | envoy-gateway-1.7-egctl | no fix |
| Chainguard | envoy-gateway-fips-1.6-egctl | no fix |
| Chainguard | envoy-gateway-fips-1.7-egctl | no fix |
| Chainguard | gatekeeper-3.21-gator | no fix |
| Chainguard | gitlab-rails-ce-18.11 | no fix |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | no fix |
| Chainguard | gitlab-rails-ce-19.1 | no fix |
| Chainguard | gitlab-rails-ce-19.2 | no fix |
| Chainguard | gitlab-rails-ce-19.3 | no fix |
| Chainguard | gitlab-rails-ce-19.4 | 0 |
| Chainguard | gitlab-rails-ce-19.4 | no fix |
| Chainguard | gitlab-rails-ce-19.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.11 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.0 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.1 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.2 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.3 | 0 |
| Chainguard | gitlab-rails-ce-fips-19.3 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.4 | 0 |
| Chainguard | gitlab-rails-ce-fips-19.5 | no fix |
| Chainguard | google-osconfig-agent | no fix |
| Chainguard | harvester | 0 |
| Chainguard | harvester-fips | 0 |
| Chainguard | harvester-fips-webhook | 0 |
| Chainguard | harvester-webhook | 0 |
| Chainguard | headlamp | 0 |
| Chainguard | headlamp-fips | 0 |
| Chainguard | headlamp-fips | no fix |
| Chainguard | helm-mapkubeapis | 0 |
| Chainguard | helm-operator | 0 |
| Chainguard | helm-operator-fips | 0 |
| Chainguard | helm-push | no fix |
| Chainguard | helm-set-status | 0 |
| Chainguard | k3s-fips-1.33 | no fix |
| Chainguard | k3s-fips-1.34 | no fix |
| Chainguard | k3s-fips-1.35 | 1.35.9.1-r1 |
| Chainguard | k3s-fips-1.36 | 1.36.5.1-r3 |
| Chainguard | k3s-fips-1.37 | 1.37.1.1-r1 |
| Chainguard | k9s | 0 |
| Chainguard | k9s-fips | no fix |
| Chainguard | k9s-fips | 0 |
| Chainguard | kaniko | no fix |
| Chainguard | kaniko-fips | 0 |
| Chainguard | kaniko-warmer | no fix |
| Chainguard | kaniko-warmer-fips | 0 |
| Chainguard | kargo-1.10 | no fix |
| Chainguard | kargo-1.11 | 0 |
| Chainguard | kargo-1.8 | 0 |
| Chainguard | kargo-1.8 | no fix |
| Chainguard | kargo-1.9 | no fix |
| Chainguard | kargo-1.9 | 0 |
| Chainguard | kgateway-2.3 | no fix |
| Chainguard | kgateway-2.4 | 0 |
| Chainguard | kgateway-2.4 | no fix |
| Chainguard | kgateway-fips-2.3 | 0 |
| Chainguard | kgateway-fips-2.4 | 0 |
| Chainguard | kubescape-operator | 0 |
| Chainguard | kubescape-operator-fips | no fix |
| Chainguard | kubescape-operator-fips | 0 |
| Chainguard | kubevela-vela-cli | no fix |
| Chainguard | kubevela-vela-cli-fips | 0 |
| Chainguard | kubevela-vela-core | no fix |
| Chainguard | kubevela-vela-core-fips | no fix |
| Chainguard | newrelic-infrastructure-agent | 0 |
| Chainguard | newrelic-infrastructure-agent-fips | no fix |
| Chainguard | rancher-2.10 | no fix |
| Chainguard | rancher-2.11 | 0 |
| Chainguard | rancher-2.11 | no fix |
| Chainguard | rancher-2.12 | no fix |
| Chainguard | rancher-2.13 | 0 |
| Chainguard | rancher-2.14 | 0 |
| Chainguard | rancher-agent-2.10 | no fix |
| Chainguard | rancher-agent-2.11 | 0 |
| Chainguard | rancher-agent-2.12 | 0 |
| Chainguard | rancher-agent-2.12 | no fix |
| Chainguard | rancher-agent-2.13 | 0 |
| Chainguard | rancher-agent-2.14 | no fix |
| Chainguard | rancher-agent-2.14 | 0 |
| Chainguard | rancher-helm-3 | 0 |
| Chainguard | rancher-helm-3 | no fix |
| Chainguard | redpanda-operator | no fix |
| Chainguard | redpanda-operator-25.1 | no fix |
| Chainguard | redpanda-operator-25.2 | no fix |
| Chainguard | redpanda-operator-25.3 | no fix |
| Chainguard | redpanda-operator-26.1 | no fix |
| Chainguard | redpanda-operator-26.2 | no fix |
| Chainguard | skaffold | 0 |
| Chainguard | skaffold | no fix |
| Chainguard | skaffold-fips | no fix |
| Chainguard | steampipe | 0 |
| Chainguard | teleport-17 | 0 |
| Chainguard | teleport-17 | no fix |
| Chainguard | teleport-18 | 0 |
| Chainguard | teleport-18 | no fix |
| Chainguard | tigera-operator-1.41 | 0 |
| Chainguard | tigera-operator-1.41 | no fix |
| Chainguard | tigera-operator-fips-1.41 | 0 |
| Chainguard | tigera-operator-fips-1.41 | no fix |
| Chainguard | upwind-agent | no fix |
| Chainguard | wazuh-manager-filebeat-oss | no fix |
| Chainguard | wazuh-manager-filebeat-oss-fips | no fix |
| Chainguard | xeol | 0 |
| Chainguard | xeol-fips | 0 |
| Debian 12 | containerd | no fix |
| Debian 13 | containerd | no fix |
| Debian 14 | containerd | no fix |
| Ubuntu 22.04 LTS | containerd | no fix |
| Ubuntu 24.04 LTS | containerd-app | no fix |
| Ubuntu 26.04 LTS | containerd-app | no fix |
| Ubuntu 26.04 LTS | containerd-stable | no fix |
| Ubuntu 26.10 | containerd | no fix |
| Ubuntu 26.10 | containerd-app | no fix |
| Ubuntu 26.10 | containerd-stable | no fix |
| Ubuntu Pro 16.04 LTS | containerd | no fix |
| Ubuntu Pro 18.04 LTS | containerd | no fix |
| Ubuntu Pro 20.04 LTS | containerd | no fix |
| Ubuntu Pro 20.04 LTS | containerd-app | no fix |
| Ubuntu Pro 22.04 LTS | containerd-app | no fix |
| Ubuntu Pro 24.04 LTS | containerd | no fix |
| Ubuntu Pro 26.04 LTS | containerd | no fix |
| Wolfi | chartmuseum | no fix |
| Wolfi | cluster-api-helm-controller | 0 |
| Wolfi | containerd-1 | no fix |
| Wolfi | containerd-shim-runc-v2-1 | no fix |
| Wolfi | containerd-stress-1 | no fix |
| Wolfi | ctr-1 | no fix |
| Wolfi | datadog-agent-7.78 | no fix |
| Wolfi | datadog-agent-7.79 | 0 |
| Wolfi | datadog-agent-7.80 | 0 |
| Wolfi | datadog-agent-7.81 | 0 |
| Wolfi | dockerd-28 | no fix |
| Wolfi | dogstatsd-7.78 | no fix |
| Wolfi | dogstatsd-7.79 | 0 |
| Wolfi | dogstatsd-7.80 | 0 |
| Wolfi | dogstatsd-7.80 | no fix |
| Wolfi | dogstatsd-7.81 | 0 |
| Wolfi | eksctl | no fix |
| Wolfi | gatekeeper-3.21-gator | no fix |
| Wolfi | headlamp | 0 |
| Wolfi | helm-mapkubeapis | 0 |
| Wolfi | helm-operator | 0 |
| Wolfi | helm-push | no fix |
| Wolfi | helm-set-status | 0 |
| Wolfi | k9s | 0 |
| Wolfi | kaniko | no fix |
| Wolfi | kaniko-warmer | no fix |
| Wolfi | kargo-1.10 | no fix |
| Wolfi | kubescape-operator | 0 |
| Wolfi | kubevela-vela-cli | no fix |
| Wolfi | kubevela-vela-core | no fix |
| Wolfi | newrelic-infrastructure-agent | 0 |
| Wolfi | rancher-2.13 | 0 |
| Wolfi | rancher-2.14 | 0 |
| Wolfi | rancher-agent-2.13 | 0 |
| Wolfi | rancher-agent-2.14 | no fix |
| Wolfi | rancher-agent-2.14 | 0 |
| Wolfi | rancher-helm-3 | no fix |
| Wolfi | rancher-helm-3 | 0 |
| Wolfi | skaffold | 0 |
| Wolfi | skaffold | no fix |
| Wolfi | steampipe | 0 |
| Wolfi | tigera-operator-1.41 | 0 |
| Wolfi | tigera-operator-1.41 | no fix |
| Wolfi | xeol | 0 |