hanzoai/visor
2
0
Fork 0
mirror of https://github.com/hanzoai/visor.git synced 2026-09-24 17:04:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update gVisor CVE track record with new entries.

Browse Source 
Add CVE-2026-43456 (network bonding type confusion) and CVE-2026-46300 (XFRM ESP-in-TCP logic flaw) to the list of vulnerabilities not exploitable under gVisor.

PiperOrigin-RevId: 951081670
This commit is contained in:
AnilAltinay
2026-07-20 15:21:42 -07:00
committed by gVisor bot
parent b01ed13618
commit dbeed7cd40
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/_data/cve-track-record.yml
+14
View File
@@ -739,6 +739,13 @@ cves:
cve: "CVE-2026-43284"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-05"
description: "A type confusion vulnerability in the Linux kernel network bonding driver ('bond_setup_by_slave') allows memory corruption and local privilege escalation when enslaving non-Ethernet devices."
risk: "Pod-to-guest escalation"
scope: "All Linux VMs"
cve: "CVE-2026-43456"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-05"
description: "GhostLock: A use-after-free vulnerability in the Linux kernel rtmutex implementation during futex_requeue operations allows local privilege escalation and container escapes."
risk: "Pod-to-guest escalation"
@@ -746,6 +753,13 @@ cves:
cve: "CVE-2026-43499"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-05"
description: "A logic vulnerability in the Linux kernel XFRM ESP-in-TCP subsystem ('Fragnesia') allows an unprivileged local user to overwrite kernel page cache and escalate privileges to root or break out of containers."
risk: "Pod-to-guest escalation"
scope: "All Linux VMs"
cve: "CVE-2026-46300"
cvss: 7.8
exploitable_under_gvisor: false
- date: "2026-06"
description: "DirtyClone: Failure to properly propagate the SKBFL_SHARED_FRAG flag when cloning network packets in the Linux kernel allows local privilege escalation."
risk: "Pod-to-guest escalation"