PT-2026-114356 · Kubernetes · Kubernetes Containerd
CVE-2026-95839
·
Published
2026-10-13
·
Updated
2026-10-14
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
containerd versions prior to 2.2.10
containerd versions prior to 2.3.7
containerd versions prior to 2.4.2
Description
A denial of service issue exists during image manifest processing. An unrecovered panic occurs when pulling or importing an image through the transfer service if a child descriptor contains the
io.containerd.manifest.subject annotation and a malformed digest. A remote attacker can provide a specially crafted manifest to crash the daemon.Recommendations
Update to version 2.2.10.
Update to version 2.3.7.
Update to version 2.4.2.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Kubernetes Containerd