BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dockerUpgrade singularityUpgrade buildkit | Aug 22, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Mar 6, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade docker-debugsourceUpgrade docker-debuginfo | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade app-containers/docker. | Sep 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade podman-catatonitUpgrade crunUpgrade netavarkUpgrade python3-podmanUpgrade podman-testsUpgrade criu-develUpgrade libslirpUpgrade podmanUpgrade criuUpgrade podman-pluginsUpgrade slirp4netnsUpgrade conmonUpgrade skopeoUpgrade libslirp-develUpgrade skopeo-testsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade podman-remoteUpgrade containers-commonUpgrade buildah-testsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade critUpgrade python3-criuUpgrade podman-gvproxyUpgrade buildahUpgrade runcUpgrade podman-dockerUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade udica | Jul 22, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade libslirp-debugsourceUpgrade buildahUpgrade python3-criuUpgrade container-selinuxUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade libslirp-develUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade podman-remoteUpgrade runcUpgrade buildah-testsUpgrade podman-gvproxy-debuginfoUpgrade criu-debugsourceUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debugsourceUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade udicaUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade critUpgrade criu-libsUpgrade buildah-debuginfoUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade containernetworking-plugins-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debugsourceUpgrade criuUpgrade skopeoUpgrade python3-podmanUpgrade podman-catatonit-debuginfoUpgrade crun-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade criu-develUpgrade slirp4netnsUpgrade conmonUpgrade fuse-overlayfsUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade conmon-debugsourceUpgrade netavarkUpgrade runc-debuginfoUpgrade toolboxUpgrade podmanUpgrade podman-plugins | May 23, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade netavarkUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade crunUpgrade libslirpUpgrade conmonUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade aardvark-dns | Jul 31, 2025 | May 7, 2025 |
| Suse | — | Upgrade docker-stable-bash-completionUpgrade docker-stable-zsh-completionUpgrade dockerUpgrade docker-rootless-extrasUpgrade docker-bash-completionUpgrade docker-fish-completionUpgrade docker-stable-buildxUpgrade docker-stable-rootless-extrasUpgrade docker-stable-fish-completionUpgrade docker-stableUpgrade docker-zsh-completion | Dec 5, 2025 | Jan 23, 2025 |
| Ubuntu | — | Upgrade docker.io-app (Ubuntu Pro)Upgrade docker.io-app | Jun 3, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub