CVE-2026-53492 Details
Description
containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint, containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as device nodes and host mounts) into the restored container. Successful exploitation requires that the node has CDI enabled and contains a matching host CDI specification for the requested device; environments where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
A vulnerability exists in containerd versions prior to 2.3.2, 2.2.5, and 2.1.9, where the CRI implementation improperly trusts Container Device Interface (CDI) annotations in untrusted checkpoint image metadata during container restoration. This flaw allows users with pod creation permissions to bypass standard Kubernetes resource allocation and device plugin enforcement by injecting arbitrary CDI edits into restored containers. Successful exploitation requires the node to have CDI enabled and a matching host CDI specification for the requested device; environments without sensitive device specifications or with CDI disabled are not affected.
Users should update to containerd versions 2.3.2, 2.2.5, or 2.1.9. It may also be necessary to recreate existing containers that were restored from untrusted checkpoints to remove any smuggled CDI configurations. As an additional step, if CDI capabilities are not being used on the node, host CDI specifications can be removed or temporarily relocated from the default directories to mitigate the vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linuxfoundation containerd | >= 2.1.0, < 2.1.9 >= 2.2.0, < 2.2.5 >= 2.3.0, < 2.3.2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 2, 2026 | Initial Analysis | [email protected] |
| Jul 2, 2026 | CVE Modified | CISA-ADP |
| Jul 1, 2026 | New CVE Received | [email protected] |