Affected by GO-2025-4100
and 8 other vulnerabilities
GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd
GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd
GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd
GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd
GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd
GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd
GO-2026-6444: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd
GreaterEqualThan checks if the host's kernel version is greater than, or
equal to the given kernel version v. Only "kernel version" and "major revision"
can be specified (e.g., "3.12") and will be taken into account, which means
that 3.12.25-gentoo and 3.12-1-amd64 are considered equal (kernel: 3, major: 12).
type KernelVersion struct {
Kernel uint64// Version of the Kernel (i.e., the "4" in "4.1.2-generic") Major uint64// Major revision of the Kernel (i.e., the "1" in "4.1.2-generic")}