{"schema":"threatline.record/2","record":{"id":"GHSA-5p7c-hggf-c748","aliases":["GHSA-5p7c-hggf-c748"],"summary":"containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails","details":"### Impact\n\nA bug in containerd's CRI plugin on Linux can cause containerd to leak read-only mounts and pinned snapshots when restoring a container from a checkpoint image fails. Repeatedly creating containers from a checkpoint image with malformed metadata or a base image that cannot be pulled can exhaust the host mount table and disk space indefinitely. In Kubernetes, this resource exhaustion can prevent containerd and the kubelet from pulling images or starting new pods on the node.\n\n### Patches\n\nThis bug has been fixed in containerd 2.3.7 and 2.2.10. Users should update to these versions to resolve the issue. To release resources from mounts leaked prior to the update, administrators must unmount any lingering `/tmp/checkpoint*` mount points on the host (or reboot the node) so containerd can garbage-collect the pinned snapshots.\n\n### Workarounds\n\ncontainerd 2.4 does not support restore via the CRI plugin and is not vulnerable to this bug.\n\nIn containerd 2.3 and 2.2, disable CRI checkpoint and restore support by setting `enable_criu = false` under `[plugins.\"io.containerd.cri.v1.runtime\"]` (or `[plugins.\"io.containerd.grpc.v1.cri\"]` in config version 2) in containerd's configuration, or ensure `enable_experimental_restore_via_create` is set to `false` (the default starting in containerd 2.3.4 and 2.2.7). Restrict pod image references to trusted registries (for example, using a Kubernetes `ValidatingAdmissionPolicy` or admission webhook).\n\n### Credits\n\nThe containerd project would like to thank @IamwhatIamSY for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\n","categories":["Containers & cloud"],"product":"github.com/containerd/containerd/v2","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-5p7c-hggf-c748","source_modified_at":"2026-10-13T22:48:31Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"range":">= 2.2.0, < 2.2.10, >= 2.3.0, < 2.3.7"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-5p7c-hggf-c748","source_modified_at":"2026-10-13T22:48:31Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"version":"2.2.10"},{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-5p7c-hggf-c748","source_modified_at":"2026-10-13T22:48:31Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"version":"2.3.7"}],"cvss":null,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-13T22:48:30Z","modified_at":"2026-10-13T22:48:31Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/containerd/containerd/security/advisories/GHSA-5p7c-hggf-c748","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-13T22:48:31Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-13T22:48:31Z","content_hash":"18b469bf9027d2677ef6d85956c2242d8729d9c927175550e61d94a0a52532e1"}}