CVE-2026-93321

Published: October 9, 2026Last modified: October 20, 2026

Description

A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.

Status

ProductReleasePackageStatus
Alpaquita Linux23 LTSbuildahNot affected (1.28.0-r1)
dockerNot affected (20.10.21-r1)
podmanNot affected (4.3.1-r0)
25 LTSbuildahNot affected (1.40.0-r0)
dockerVulnerable (28.2.1-r0)
docker-cli-buildxNot affected (0.24.0-r0)
osv-scannerNot affected (2.1.0-r4)
podmanNot affected (5.5.0-r0)
StreambuildahNot affected (1.31.0-r0)
dockerFixed (29.9.0-r0)
docker-cli-buildxNot affected (0.11.0-r0)
osv-scannerNot affected (2.1.0-r2)
podmanNot affected (4.5.1-r1)

References

ON THIS PAGE