Lei Wang

**Name of the Vulnerable Software and Affected Versions** BuildKit (affected versions not specified) **Description** Custom frontends or clients utilizing the raw low-level API may set the `git.checkoutbundle` variable to `true` during the checkout of Git sources. A malicious Git source can exploit this configuration to trigger a crafted command invocation on the host system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** containerd versions prior to 2.3.1 containerd versions prior to 2.2.4 containerd versions prior to 2.0.9 containerd versions prior to 1.7.32 **Description** An input validation error exists where containers launched with a numeric `User` directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. If a crafted image includes an `/etc/passwd` file that maps this large numeric string to root, the container runs as root (UID 0). This allows the Kubernetes `runAsNonRoot` restriction to be bypassed, affecting environments that require containers to run as a non-root user. **Recommendations** Update to version 2.3.1. Update to version 2.2.4. Update to version 2.0.9. Update to version 1.7.32. Ensure only trusted images are used and only trusted users have permissions to import images. Enforce a specific numeric `runAsUser` in the Kubernetes Pod `securityContext` to override the `USER` directive in the image.

**Name of the Vulnerable Software and Affected Versions** GitHub (affected versions not specified) **Description** An issue exists where binding to an unrestricted IP address allows an unauthorized attacker to execute code over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit (affected versions not specified) **Description** The NVIDIA Container Toolkit contains an issue in the `update-ldcache` hook. An attacker could potentially cause a link following by using a specially crafted container image. A successful exploit might lead to data tampering and denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Container Toolkit versions up to and including 1.17.3 NVIDIA GPU Operator versions up to and including 24.9.1 **Description** NVIDIA Container Toolkit and NVIDIA GPU Operator are affected by a Time-of-Check Time-of-Use (TOCTOU) vulnerability. This flaw can allow a crafted container image to gain access to the host file system, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. A bypass was discovered for a previously patched security flaw, reflagged as CVE-2025-23359. The vulnerability exists due to errors in synchronization when using a shared resource, creating a race condition. **Recommendations** NVIDIA Container Toolkit versions up to and including 1.17.3: Upgrade to a newer version to address the vulnerability. NVIDIA GPU Operator versions up to and including 24.9.1: Upgrade to a newer version to address the vulnerability.

**Name of the Vulnerable Software and Affected Versions** apport-cli versions 2.26.0 and earlier **Description** A privilege escalation attack was found, similar to a known issue, which can be exploited by a local attacker if the system is specially configured. This configuration includes allowing unprivileged users to run `sudo apport-cli`, having `less` configured as the pager, and the ability to set the terminal size. It is unlikely that a system administrator would configure `sudo` to allow unprivileged users to perform this class of exploit. **Recommendations** For apport-cli versions 2.26.0 and earlier, consider restricting the use of `sudo apport-cli` to privileged users only, and review the configuration of the pager and terminal settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Moby (Docker Engine) versions prior to 20.10.9 **Description** A bug was found in Moby (Docker Engine) where attempting to copy files using `docker cp` into a specially-crafted container can result in Unix file permission changes for existing files in the host’s filesystem, widening access to others. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. **Recommendations** To resolve the issue, update to Moby (Docker Engine) version 20.10.9 as soon as possible. Running containers do not need to be restarted. As a temporary workaround, ensure you only run trusted containers.