AZL-106809

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106809.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-106809

Upstream

CVE-2026-93319

Published

2026-10-05T18:17:38Z

Modified

2026-10-10T05:36:40Z

Summary

CVE-2026-93319 affecting package moby-engine 25.0.3-20

Details

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-93319

Affected packages

Azure Linux:3 / moby-engine

Package

Name: moby-engine
Purl: pkg:rpm/azure-linux/moby-engine

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

25.0.3-20

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-106809.json"