Skip to content
OpenAdvisories

Package · Debian

criu

4 known vulnerabilities.

3 results · Feed

  • High 7.8
    CVE-2026-18107 Public exploit

    Criu: criu: container escape via rseq critical section hijack during checkpoint/restore

    A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the…

  • Unscored —

    The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obt…

  • Unscored —

    The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files an…