CVE-2024-40635

HIGH EPSS 19.2%
Published Mar 17, 20251y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Mar 17, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
19.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 4

VendorProductVersionRange
linuxfoundationcontainerd* <1.6.38
linuxfoundationcontainerd*≥1.7.0  –  <1.7.27
linuxfoundationcontainerd*≥2.0.0  –  <2.0.4
debiandebian_linux11.0any

References 5

  • github.com https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da
    Patch
  • github.com https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20
    Patch
  • github.com https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a
    Patch
  • github.com https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg
    Vendor Advisory
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html
    Mailing ListThird Party Advisory

Remediation

  • github.com https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da
    Patch
  • github.com https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20
    Patch
  • github.com https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a
    Patch