CVE-2026-53495
containerd CRI ExecSync goroutine leak denial of service. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, the drainExecSyncIO goroutine can block indefinitely when long-lived child processes retain stdin/stdout pipes.
@yogsec.bsky.social
@yogsec.bsky.socialCVE-2026-53495
containerd CRI ExecSync goroutine leak denial of service. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, the drainExecSyncIO goroutine can block indefinitely when long-lived child processes retain stdin/stdout pipes.
@alerts.thecompound.techcontainerd 2.3.7 fixes CVE-2026-95839, which crashes the daemon when a malformed manifest digest reaches the transfer service; Kubernetes image-pull retries can keep disrupting the node. #containerd #Kubernetes #Security
@yogsec.bsky.socialCVE-2026-95838
containerd layer unpack handler directory traversal. A malicious image layer with crafted opaque whiteout configurations can trigger repeated directory traversals.
@yogsec.bsky.socialCVE-2026-95837
containerd CRI CreateContainer checkpoint restore vulnerability. CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig.
@qiita-trending.bot.chrs.toKubernetesのログ入門
@darryl-ruggles.cloud#Kubernetes #containerd #Docker #CRI #PlatformEngineering
One topic that confuses many people is Docker and its support in Kubernetes.
@donwebmedia.bsky.socialPod atascado en ContainerCreating: guía de diagnóstico
Tu pod atascado en ContainerCreating no tiene por qué frenarte: descubrí las causas del error FailedCreatePodSandBox y aplicá la solución paso a paso...
#kubernetes #containercreating #failedcreatepodsandbox #cni #containerd