BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade dockerUpgrade singularityUpgrade buildkit | Aug 22, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade docker | Mar 6, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade docker-debugsourceUpgrade docker | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade app-containers/docker. | Sep 30, 2024 | Jan 31, 2024 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade cockpit-podmanUpgrade buildah-testsUpgrade critUpgrade runcUpgrade buildahUpgrade containers-commonUpgrade python3-criuUpgrade udicaUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade aardvark-dnsUpgrade podman-remoteUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade podman-catatonitUpgrade slirp4netnsUpgrade skopeoUpgrade podman-testsUpgrade libslirp-develUpgrade skopeo-testsUpgrade podmanUpgrade criuUpgrade fuse-overlayfsUpgrade criu-develUpgrade netavarkUpgrade libslirpUpgrade python3-podmanUpgrade podman-pluginsUpgrade conmonUpgrade crun | Jul 22, 2024 | Jan 31, 2024 |
| Redhat_linux | — | Upgrade criu-debuginfoUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade slirp4netns-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade runcUpgrade conmon-debuginfoUpgrade buildah-testsUpgrade container-selinuxUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-remoteUpgrade criu-libs-debuginfoUpgrade critUpgrade podman-remote-debuginfoUpgrade cockpit-podmanUpgrade buildah-debuginfoUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade toolbox-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade udicaUpgrade criuUpgrade conmon-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-testsUpgrade python3-podmanUpgrade containernetworking-plugins-debuginfoUpgrade netavarkUpgrade slirp4netns-debugsourceUpgrade crunUpgrade toolboxUpgrade runc-debuginfoUpgrade podman-dockerUpgrade podman-gvproxyUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade conmonUpgrade criu-develUpgrade slirp4netnsUpgrade podman-catatonit-debuginfoUpgrade libslirpUpgrade skopeoUpgrade podman-catatonitUpgrade podman | May 23, 2024 | Jan 31, 2024 |
| Rocky_linux | — | Upgrade crun-debugsourceUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade conmonUpgrade containers-commonUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade crun-debuginfoUpgrade crunUpgrade toolboxUpgrade netavarkUpgrade libslirp-devel | Jul 31, 2025 | May 7, 2025 |
| Suse | — | Upgrade docker-stable-zsh-completionUpgrade dockerUpgrade docker-bash-completionUpgrade docker-stable-bash-completionUpgrade docker-stable-rootless-extrasUpgrade docker-stable-buildxUpgrade docker-rootless-extrasUpgrade docker-fish-completionUpgrade docker-stableUpgrade docker-stable-fish-completionUpgrade docker-zsh-completion | Dec 5, 2025 | Jan 23, 2025 |
| Ubuntu | — | Upgrade docker.io-appUpgrade docker.io-app (Ubuntu Pro) | Jun 3, 2025 | Jan 31, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub