BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special `security.insecure` entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request. The issue has been fixed in v0.12.5 . Avoid using BuildKit frontends from untrusted sources.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade buildkitUpgrade podmanUpgrade dockerUpgrade singularity | Aug 22, 2024 | Jan 31, 2024 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfo | Mar 6, 2024 | Jan 31, 2024 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade docker-debugsourceUpgrade docker-debuginfo | Feb 17, 2025 | Jan 31, 2024 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/docker.Upgrade app-containers/podman. | Jul 9, 2024 | Jan 31, 2024 |
| Suse | — | Upgrade buildkitUpgrade docker-rootless-extrasUpgrade docker-stableUpgrade docker-fish-completionUpgrade docker-stable-rootless-extrasUpgrade docker-buildxUpgrade docker-zsh-completionUpgrade docker-stable-bash-completionUpgrade buildahUpgrade dockerUpgrade docker-stable-buildxUpgrade docker-bash-completionUpgrade docker-stable-zsh-completionUpgrade docker-stable-fish-completion | Feb 23, 2024 | Jan 31, 2024 |
| Ubuntu | — | Upgrade docker.io-appUpgrade docker.io-app (Ubuntu Pro) | Jun 3, 2025 | Jan 31, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub