The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host due to goroutine leaks. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. To workaround this vulnerability, users can set up an admission controller to control accesses to pods/attach resources.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade containerd-stressUpgrade containerdUpgrade containerd-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade containerd | Dec 4, 2025 | Dec 4, 2025 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-engineUpgrade docker-engine-selinux | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 7, 2025 |
| Suse | — | Upgrade containerdUpgrade containerd-develUpgrade containerd-ctr | Dec 5, 2025 | Nov 12, 2025 |
| Ubuntu | — | Upgrade golang-github-containerd-containerd-devUpgrade golang-github-containerd-containerd-dev (Ubuntu Pro)Upgrade containerdUpgrade containerd (Ubuntu Pro)Upgrade golang-github-docker-containerd-dev (Ubuntu Pro) | Jan 30, 2026 | Nov 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 7, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub