hanzoai/visor
2
0
Fork 0
mirror of https://github.com/hanzoai/visor.git synced 2026-09-24 17:04:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update gvisor security track record.

Browse Source 
Update gVisor security track record that it is not affected by CVE-2026-43500
vulnerability related to RxRPC protocol.

PiperOrigin-RevId: 964360221
This commit is contained in:
Nayana Bidari
2026-08-13 16:37:11 -07:00
committed by gVisor bot
parent ad04304d28
commit 1d8cfce53f
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/_data/cve-track-record.yml
+11 -4
View File
@@ -754,10 +754,10 @@ cves:
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-05"
description: "A logic vulnerability in the Linux kernel XFRM ESP-in-TCP subsystem ('Fragnesia') allows an unprivileged local user to overwrite kernel page cache and escalate privileges to root or break out of containers."
risk: "Pod-to-guest escalation"
scope: "All Linux VMs"
cve: "CVE-2026-46300"
description: "An out-of-bounds write and use-after-free vulnerability in the Linux kernel's RxRPC networking subsystem, known as 'Dirty Frag'. It allows for local privilege escalation due to mishandling of paged fragments."
risk: "Local privilege escalation"
scope: "All Linux containers"
cve: "CVE-2026-43500"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-06"
@@ -767,6 +767,13 @@ cves:
cve: "CVE-2026-43503"
cvss: 8.8
exploitable_under_gvisor: false
- date: "2026-05"
description: "A logic vulnerability in the Linux kernel XFRM ESP-in-TCP subsystem ('Fragnesia') allows an unprivileged local user to overwrite kernel page cache and escalate privileges to root or break out of containers."
risk: "Pod-to-guest escalation"
scope: "All Linux VMs"
cve: "CVE-2026-46300"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-07"
description: "Januscape: A use-after-free vulnerability in the KVM shadow MMU code in the Linux kernel allows guest-to-host escape and privilege escalation to root."
risk: "Guest-to-host escalation"