SB2026110482 - Resource exhaustion in containerd

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026110482

SB2026110482 - Resource exhaustion in containerd

Published: November 4, 2026

Security Bulletin ID SB2026110482
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Resource exhaustion (CVE-ID: N/A)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service by exhausting host disk space.

The vulnerability exists due to uncontrolled resource consumption in containerd's image pull process when downloading image layers without limiting incoming bytes to their declared size before validation. A remote attacker can induce a victim to pull a crafted image that supplies an unbounded layer stream to exhaust host disk space, potentially rendering containerd and the Kubernetes kubelet unresponsive and blocking new pod startup.


Remediation

Install update from vendor's website.

References