CVE-2026-96812

Name of the Vulnerable Software and Affected Versions Google gVisor versions prior to commit 573a9e73cf844f

Description An improper exposure of resource to the wrong sphere exists in the host file helper (gofer) on Linux platforms with CUSE (Character device for Userspace) enabled. A local attacker with container image deployment privileges can achieve root code execution on the host system by including a /dev/cuse character device node in a container image. Opening this device allows the sandboxed attacker to register a host device and exploit unrestricted ioctl (input/output control) handling to overwrite root udev helper memory.

Recommendations Update Google gVisor to commit 573a9e73cf844f or a later version.