BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade singularityUpgrade dockerUpgrade buildkit | Aug 22, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Mar 6, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade docker-debugsourceUpgrade docker | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade app-containers/docker. | Sep 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade skopeoUpgrade crunUpgrade podman-catatonitUpgrade libslirp-develUpgrade podman-testsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade criuUpgrade podmanUpgrade fuse-overlayfsUpgrade criu-develUpgrade podman-pluginsUpgrade conmonUpgrade libslirpUpgrade python3-podmanUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade podman-dockerUpgrade python3-criuUpgrade podman-gvproxyUpgrade podman-remoteUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade runcUpgrade buildahUpgrade cockpit-podmanUpgrade udicaUpgrade aardvark-dnsUpgrade critUpgrade containers-commonUpgrade buildah-tests | Jul 22, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade containers-commonUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade criu-debuginfoUpgrade container-selinuxUpgrade conmon-debuginfoUpgrade runcUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade toolbox-testsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade podman-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade cockpit-podmanUpgrade critUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-testsUpgrade criu-libsUpgrade podman-plugins-debuginfoUpgrade runc-debugsourceUpgrade podman-remote-debuginfoUpgrade udicaUpgrade buildahUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade skopeo-testsUpgrade criuUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade podman-testsUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-dockerUpgrade skopeoUpgrade libslirpUpgrade netavarkUpgrade podman-catatonitUpgrade python3-podmanUpgrade conmonUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade slirp4netnsUpgrade criu-devel | May 23, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade toolbox-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade slirp4netns-debugsourceUpgrade runc-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade slirp4netnsUpgrade crunUpgrade conmonUpgrade netavarkUpgrade libslirpUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containers-commonUpgrade conmon-debuginfoUpgrade toolbox | Jul 31, 2025 | May 7, 2025 |
| Suse | — | Upgrade docker-bash-completionUpgrade docker-stable-rootless-extrasUpgrade docker-stable-bash-completionUpgrade docker-fish-completionUpgrade docker-stable-buildxUpgrade docker-stable-zsh-completionUpgrade docker-rootless-extrasUpgrade dockerUpgrade docker-stableUpgrade docker-zsh-completionUpgrade docker-stable-fish-completion | Dec 5, 2025 | Jan 23, 2025 |
| Ubuntu | — | Upgrade docker.io-appUpgrade docker.io-app (Ubuntu Pro) | Jun 3, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub