CVE-2026-53493
6.9
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Summary
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| containerd | containerd | >= 2.0.0, < 2.0.13 | affected |
| containerd | containerd | < 1.7.36 | affected |
| containerd | containerd | >= 2.1.0, < 2.2.9 | affected |
| containerd | containerd | >= 2.3.0, < 2.3.6 | affected |
| containerd | containerd | = 2.4.0 | affected |
Weaknesses
- CWE-400: CWE-400: Uncontrolled Resource Consumption
- CWE-770: CWE-770: Allocation of Resources Without Limits or Throttling
- CWE-834: CWE-834: Excessive Iteration
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.