Description
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| moby | buildkit | < 0.12.5 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | docker.io-app | 27.5.1-0ubuntu3~24.04.2 | — |
| Ubuntu 22.04 LTS | docker.io-app | 27.5.1-0ubuntu3~22.04.2 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | docker.io-app | 26.1.3-0ubuntu1~20.04.1+esm1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+21209+52deeb51 | RHSA-2024:2988 |
| RHEL 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+21371+46937ece | RHSA-2024:2988 |
| RHEL 8 | cockpit-podman | 84.1-1.module+el8.10.0+21373+0d273fdf | RHSA-2024:2988 |
| RHEL 8 | conmon | 3:2.1.10-1.module+el8.10.0+21077+98b84d8a | RHSA-2024:2988 |
| RHEL 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+21366+f9cb49f8 | RHSA-2024:2988 |
| RHEL 8 | containers-common | 2:1-81.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | crit +4 | 3.18-4.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | crun | 1.14.3-2.module+el8.10.0+21340+c6c7475a | RHSA-2024:2988 |
| RHEL 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+20412+95ee28e2 | RHSA-2024:2988 |
| RHEL 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
| RHEL 8 | netavark | 2:1.10.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+20565+a40ba0e5 | RHSA-2024:2988 |
| RHEL 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+21350+ea09fba1 | RHSA-2024:2988 |
| RHEL 8 | python-podman +1 | 4.9.0-1.module+el8.10.0+21196+3f0abbca | RHSA-2024:2988 |
| RHEL 8 | runc | 1:1.1.12-1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+21251+62b7388c | RHSA-2024:2988 |
| RHEL 8 | slirp4netns | 1.2.3-1.module+el8.10.0+21306+6be40ce7 | RHSA-2024:2988 |
| RHEL 8 | toolbox +1 | 0.0.99.5-2.module+el8.10.0+21341+ff0b5f89 | RHSA-2024:2988 |
| RHEL 8 | udica | 0.2.6-20.module+el8.9.0+20326+387084d0 | RHSA-2024:2988 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | containers-common | 2:1-81.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | crun | 1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 | RLSA-2024:2988 |
| Rocky Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | python-podman | 4.9.0-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:2988 |
| Rocky Linux 8 | toolbox | 0.0.99.5-2.module+el8.10.0+1815+5fe7415e.rocky.0.2.rocky.0.2 | RLSA-2024:2988 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | docker-stable | 24.0.9_ce-150000.1.25.1 | SUSE-SU-2026:0972-1, SUSE-SU-2025:03545-1 |
| SLES 15 SP6 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES 15 SP6 | docker-stable | 24.0.9_ce-150000.1.11.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1, SUSE-SU-2025:0226-1 |
| SLES 15 SP5 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES 15 SP5 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLES 15 SP4 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES 15 SP4 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLES 15 SP3 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES 15 SP3 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP5 | docker | 27.5.1_ce-98.126.1 | SUSE-SU-2025:1102-1 |
| SLES 12 SP5 | docker-stable | 24.0.9_ce-1.11.1 | SUSE-SU-2026:1118-1, SUSE-SU-2025:1102-1, SUSE-SU-2025:03540-1 |
| SLES for SAP 15 SP5 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES for SAP 15 SP5 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP4 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES for SAP 15 SP4 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLES for SAP 15 SP3 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLES for SAP 15 SP3 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLE Micro 5.5 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE Micro 5.4 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE Micro 5.3 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE Micro 5.2 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE Micro 5.1 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE HPC 15 SP5 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE HPC 15 SP5 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP4 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE HPC 15 SP4 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SLE HPC 15 SP3 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SLE HPC 15 SP3 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
| SUSE Enterprise Storage 7.1 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| SUSE Enterprise Storage 7.1 | docker-stable | 24.0.9_ce-150000.1.15.1 | SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | docker-stable | 24.0.9_ce-6.1 | openSUSE-SU-2024:14598-1 |
| openSUSE Tumbleweed | singularity-ce | 4.1.3-1.1 | openSUSE-SU-2024:14059-1 |
| openSUSE Leap 15.6 | docker | 27.5.1_ce-150000.218.1 | SUSE-SU-2025:1062-1 |
| openSUSE Leap 15.6 | docker-stable | 24.0.9_ce-150000.1.11.1 | SUSE-SU-2026:0972-1, SUSE-SU-2025:1062-1, SUSE-SU-2025:03545-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | buildkit | 0.12.5-r0 | — |
| Alpine v3.24 | docker | 25.0.2-r0 | — |
| Alpine v3.24 | singularity | 4.1.1-r0 | — |
| Alpine v3.23 | buildkit | 0.12.5-r0 | — |
| Alpine v3.23 | docker | 25.0.2-r0 | — |
| Alpine v3.23 | singularity | 4.1.1-r0 | — |
| Alpine v3.22 | buildkit | 0.12.5-r0 | — |
| Alpine v3.22 | docker | 25.0.2-r0 | — |
| Alpine v3.22 | singularity | 4.1.1-r0 | — |
| Alpine v3.21 | buildkit | 0.12.5-r0 | — |
| Alpine v3.21 | docker | 25.0.2-r0 | — |
| Alpine v3.21 | singularity | 4.1.1-r0 | — |
| Alpine v3.20 | buildkit | 0.12.5-r0 | — |
| Alpine v3.20 | docker | 25.0.2-r0 | — |
| Alpine v3.20 | singularity | 4.1.1-r0 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | buildkit | 0.12.5-r0 | — |
| Alpine v3.19 | docker | 25.0.2-r0 | — |
| Alpine v3.19 | singularity | 4.1.1-r0 | — |
| Alpine v3.18 | docker | 25.0.2-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | docker | 25.0.3-1.amzn2023.0.1 | ALAS2023-2024-542 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | docker-buildx | 0.14.0-1 | — |
| Azure Linux 3 | docker-compose | 2.27.0-1 | — |
| Azure Linux 3 | moby-engine | 25.0.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | moby-compose | 2.17.3-5 | — |
| Azure Linux 2 (CBL-Mariner) | moby-engine | 24.0.9-14 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | aardvark-dns | 2:1.10.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | buildah +1 | 2:1.33.6-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | cockpit-podman | 84.1-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | conmon | 3:2.1.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | container-selinux | 2:2.229.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.4.0-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | containers-common | 2:1-81.0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | crit +4 | 3.18-4.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | crun | 1.14.3-2.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | fuse-overlayfs | 1.13-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
| Oracle Linux 8 | netavark | 2:1.10.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.10-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | podman +6 | 3:4.9.4-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | python3-podman | 4.9.0-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | skopeo +1 | 2:1.14.3-0.1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | slirp4netns | 1.2.3-1.module+el8.10.0+90298+77a9814d | ELSA-2024-2988 |
| Oracle Linux 8 | udica | 0.2.6-20.module+el8.9.0+90147+a4870853 | ELSA-2024-2988 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | buildkitd | 0.12.5-r0 | — |
| Wolfi rolling | docker-dind | 25.0.2-r0 | — |
| Wolfi rolling | guac | 0.4.0-r1 | — |
| Wolfi rolling | kaniko +3 | 1.20.1-r0 | — |
| Wolfi rolling | kubescape | 3.0.3-r7 | — |
| Wolfi rolling | scorecard | 4.13.1-r4 | — |
| Wolfi rolling | skaffold | 2.11.0-r0 | — |
| Wolfi rolling | trivy +1 | 0.49.0-r1 | — |
| Wolfi rolling | zot | 2.0.1-r2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/moby/buildkit | < 0.12.5 | 0.12.5 | GHSA-9p26-698r-w4hx |
Advisories 14
- RHSA-2024:2988 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- SUSE-SU-2026:1118-1 Security update for docker-stable SUSE / openSUSE Security Updates · Mar 29, 2026
- SUSE-SU-2026:0972-1 Security update for docker-stable SUSE / openSUSE Security Updates · Mar 24, 2026
- SUSE-SU-2025:03545-1 Security update for docker-stable SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2024:14059-1 singularity-ce-4.1.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14598-1 docker-stable-24.0.9_ce-6.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0226-1 Security update for docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:1102-1 Security update for docker, docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:1062-1 Security update for docker, docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:03540-1 Security update for docker-stable SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-0272 docker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- RLSA-2024:2988 Moderate: container-tools:rhel8 security update Rocky Linux Security Advisories · May 7, 2025
- ALAS2023-2024-542 Important: docker security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 28, 2024
- ELSA-2024-2988 Moderate: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 24, 2024