Bug 2540879 (CVE-2026-53493) - CVE-2026-53493 github.com/containerd/containerd: containerd: Denial of Service via crafted OCI image index
Summary: CVE-2026-53493 github.com/containerd/containerd: containerd: Denial of Servic...
Keywords:
Status: NEW
Alias: CVE-2026-53493
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-25 01:01 UTC by OSIDB Bzimport
Modified: 2026-10-19 16:26 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-25 01:01:13 UTC 
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.
Note You need to log in before you can comment on or make changes to this bug.