Description
Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | docker.io | 1.6.1+dfsg1-1 | — |
| Debian 13 | docker.io | 1.6.1+dfsg1-1 | — |
| Debian 12 | docker.io | 1.6.1+dfsg1-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | docker.io | 1.6.2~dfsg1-1ubuntu4 | — |
| Ubuntu 14.04 LTS | docker.io | 1.6.2~dfsg1-1ubuntu4~14.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | atomic | 0-0.40.gitf863afd.el7 | RHBA-2015:1167 |
| Red Hat Rhel Extras Other 7 | docker +2 | 1.6.2-14.el7 | RHBA-2015:1167 |
| Red Hat Rhel Extras Other 7 | docker-python | 1.0.0-53.el7 | RHBA-2015:1167 |
| Red Hat Rhel Extras Other 7 | python-websocket-client | 0.14.1-97.el7 | RHBA-2015:1167 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP6 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | docker-stable | 24.0.9_ce-1.20.1 | SUSE-SU-2025:03540-1 |
| SLES 12 | docker | 1.6.2-31.2 | SUSE-SU-2015:0984-1 |
| SLES for SAP 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLES for SAP 12 | docker | 1.6.2-31.2 | SUSE-SU-2015:0984-1 |
| SLE HPC 15 SP5 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP4 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP3 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | docker | 1.12.3-4.1 | openSUSE-SU-2024:10532-1 |
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-15.1 | openSUSE-SU-2025:15589-1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2025:03545-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | docker +5 | 1.6.1-1.0.1.el7 | ELSA-2015-3037 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/docker/docker | >= 1.6.0, < 1.6.1 | 1.6.1 | GHSA-g44j-7vp3-68cv |
Advisories 7
- openSUSE-SU-2025:15589-1 docker-stable-24.0.9_ce-15.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:03545-1 Security update for docker-stable SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2015:0984-1 Security update for docker SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10532-1 docker-1.12.3-4.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:03540-1 Security update for docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- RHBA-2015:1167 Red Hat Bug Fix Advisory: docker bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- ELSA-2015-3037 Important: docker security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 20, 2015
References
- https://groups.google.com/forum/#%21searchin/docker-user/1.6.1/docker-user/47GZrihtr-4/nwgeOOFLexIJ
- 20150508 Docker 1.6.1 - Security Advisory [150507] mailing-list
- openSUSE-SU-2015:0905 vendor-advisory
- http://packetstormsecurity.com/files/131835/Docker-Privilege-Escalation-Information-Disclosure.html
- 74558 vdb-entry