CVE-2026-18107

Name of the Vulnerable Software and Affected Versions CRIU (affected versions not specified)

Description An issue exists in the handling of restartable sequences (rseq) during the checkpoint/restore process. A malicious process within a container can register an rseq critical section to hijack the parasite code injection during a checkpoint. This allows the process to spoof credentials saved in the checkpoint image, resulting in the container process gaining elevated capabilities and zeroed UIDs/GIDs upon restoration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.