PT-2026-45868

CVE-2026-8936

Published

2026-06-02

Updated

2026-06-03

Description by

CVSS 4.0

8.2

High

MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/R:U

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.76.0

Description A VM panic occurs due to unbounded recursion within the grpcfuse kernel module. This happens when a container creates deeply nested directories on a bind-mounted host folder and triggers a dentry invalidation event. Unbounded recursion is a process where a function calls itself without a defined limit, potentially exhausting system resources and causing a crash.

Recommendations Update to version 4.76.0.

Exploitability

Fix

Impacts

Researchers

Nitesh Surana

Vendors

Affected products

Weakness enumeration

CWE-674: Uncontrolled Recursion

Related identifiers

CVE-2026-8936