CVE-2026-95702

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-95702
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95702.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-95702
Downstream
Published
2026-10-09T14:44:35Z
Modified
2026-10-28T11:21:46Z
Severity
  • 8.5 (High) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile
Details

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

Database specific 
{
    "cna_assigner":  "Google",
    "cwe_ids":  [
        "CWE-415",
        "CWE-416"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95702.json"
}
References

Affected packages

Git / github.com/google/gvisor

Affected ranges

Type
GIT
Repo
https://github.com/google/gvisor
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
fd2f6b2674208086e324c2f739155eb7e1b48ff2
Fixed
90bc4fc36fe442257a06ba15df00371561c183ed
Fixed
25c75149bc0eeaa6a3a49b9bbe3473588b2af6df
Fixed
e4efb89c787ef15b09e68d561f1303380e1d5a77
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "20260831.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "range":  [
                {
                    "fixed":  "90bc4fc36fe442257a06ba15df00371561c183ed"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "25c75149bc0eeaa6a3a49b9bbe3473588b2af6df"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "e4efb89c787ef15b09e68d561f1303380e1d5a77"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

release-20190304.*
release-20190304.1
release-20190529.*
release-20190529.1
release-20190722.*
release-20190722.1
release-20190806.*
release-20190806.1
release-20191104.*
release-20191104.0
release-20191114.*
release-20191114.0
release-20191129.*
release-20191129.0
release-20191210.*
release-20191210.0
release-20191213.*
release-20191213.0
release-20200115.*
release-20200115.0
release-20200127.*
release-20200127.0
release-20200211.*
release-20200211.0
release-20200219.*
release-20200219.0
release-20200323.*
release-20200323.0
release-20200413.*
release-20200413.0
release-20200422.*
release-20200422.0
release-20200511.*
release-20200511.0
release-20200518.*
release-20200518.0
release-20200522.*
release-20200522.0
release-20200601.*
release-20200601.0
release-20200608.*
release-20200608.0
release-20200622.*
release-20200622.1
release-20200804.*
release-20200804.0
release-20200810.*
release-20200810.0
release-20200818.*
release-20200818.0
release-20200907.*
release-20200907.0
release-20200914.*
release-20200914.0
release-20200921.*
release-20200921.0
release-20200928.*
release-20200928.0
release-20201005.*
release-20201005.0
release-20201012.*
release-20201012.0
release-20201019.*
release-20201019.0
release-20201027.*
release-20201027.0
release-20201030.*
release-20201030.0
release-20201109.*
release-20201109.0
release-20201117.*
release-20201117.0
release-20201130.*
release-20201130.0
release-20201208.*
release-20201208.0
release-20201216.*
release-20201216.0
release-20210112.*
release-20210112.0
release-20210121.*
release-20210121.1
release-20210125.*
release-20210125.0
release-20210201.*
release-20210201.0
release-20210208.*
release-20210208.0
release-20210301.*
release-20210301.0
release-20210309.*
release-20210309.0
release-20210315.*
release-20210315.0
release-20210322.*
release-20210322.0
release-20210408.*
release-20210408.0
release-20210412.*
release-20210412.0
release-20210419.*
release-20210419.0
release-20210503.*
release-20210503.0
release-20210510.*
release-20210510.0
release-20210518.*
release-20210518.0
release-20210601.*
release-20210601.0
release-20210607.*
release-20210607.0
release-20210614.*
release-20210614.0
release-20210622.*
release-20210622.0
release-20210628.*
release-20210628.0
release-20210705.*
release-20210705.0
release-20210712.*
release-20210712.0
release-20210720.*
release-20210720.0
release-20210726.*
release-20210726.0
release-20210806.*
release-20210806.0
release-20210816.*
release-20210816.0
release-20210823.*
release-20210823.0
release-20210830.*
release-20210830.0
release-20210906.*
release-20210906.0
release-20210921.*
release-20210921.0
release-20210927.*
release-20210927.0
release-20211005.*
release-20211005.0
release-20211011.*
release-20211011.0
release-20211019.*
release-20211019.0
release-20211026.*
release-20211026.0
release-20211101.*
release-20211101.0
release-20211108.*
release-20211108.0
release-20211115.*
release-20211115.0
release-20211122.*
release-20211122.0
release-20211129.*
release-20211129.0
release-20220103.*
release-20220103.0
release-20220117.*
release-20220117.0
release-20220124.*
release-20220124.0
release-20220131.*
release-20220131.0
release-20220208.*
release-20220208.0
release-20220214.*
release-20220214.0
release-20220221.*
release-20220221.0
release-20220222.*
release-20220222.0
release-20220228.*
release-20220228.0
release-20220309.*
release-20220309.0
release-20220314.*
release-20220314.0
release-20220321.*
release-20220321.0
release-20220328.*
release-20220328.0
release-20220405.*
release-20220405.0
release-20220411.*
release-20220411.0
release-20220418.*
release-20220418.0
release-20220425.*
release-20220425.0
release-20220502.*
release-20220502.1
release-20220510.*
release-20220510.0
release-20220516.*
release-20220516.0
release-20220606.*
release-20220606.0
release-20220621.*
release-20220621.0
release-20220627.*
release-20220627.0
release-20220704.*
release-20220704.0
release-20220713.*
release-20220713.0
release-20220718.*
release-20220718.0
release-20220801.*
release-20220801.0
release-20220808.*
release-20220808.0
release-20220815.*
release-20220815.0
release-20220822.*
release-20220822.0
release-20220905.*
release-20220905.0
release-20220913.*
release-20220913.0
release-20220919.*
release-20220919.0
release-20220926.*
release-20220926.0
release-20221003.*
release-20221003.0
release-20221010.*
release-20221010.0
release-20221017.*
release-20221017.0
release-20221026.*
release-20221026.0
release-20221102.*
release-20221102.1
release-20221107.*
release-20221107.0
release-20221122.*
release-20221122.0
release-20221128.*
release-20221128.0
release-20221205.*
release-20221205.0
release-20221212.*
release-20221212.0
release-20221219.*
release-20221219.0
release-20230102.*
release-20230102.0
release-20230109.*
release-20230109.0
release-20230118.*
release-20230118.0
release-20230123.*
release-20230123.0
release-20230130.*
release-20230130.0
release-20230214.*
release-20230214.0
release-20230227.*
release-20230227.0
release-20230306.*
release-20230306.0
release-20230313.*
release-20230313.0
release-20230320.*
release-20230320.0
release-20230327.*
release-20230327.0
release-20230417.*
release-20230417.0
release-20230501.*
release-20230501.0
release-20230508.*
release-20230508.0
release-20230517.*
release-20230517.0
release-20230522.*
release-20230522.0
release-20230529.*
release-20230529.0
release-20230605.*
release-20230605.0
release-20230621.*
release-20230621.0
release-20230627.*
release-20230627.0
release-20230710.*
release-20230710.0
release-20230717.*
release-20230717.0
release-20230724.*
release-20230724.0
release-20230731.*
release-20230731.0
release-20230801.*
release-20230801.0
release-20230807.*
release-20230807.0
release-20230814.*
release-20230814.0
release-20230823.*
release-20230823.0
release-20230904.*
release-20230904.0
release-20230911.*
release-20230911.0
release-20230920.*
release-20230920.0
release-20230925.*
release-20230925.0
release-20231003.*
release-20231003.0
release-20231009.*
release-20231009.0
release-20231016.*
release-20231016.0
release-20231023.*
release-20231023.0
release-20231030.*
release-20231030.0
release-20231106.*
release-20231106.0
release-20231113.*
release-20231113.0
release-20231120.*
release-20231120.0
release-20231204.*
release-20231204.0
release-20231211.*
release-20231211.0
release-20231218.*
release-20231218.0
release-20240109.*
release-20240109.0
release-20240115.*
release-20240115.0
release-20240122.*
release-20240122.0
release-20240129.*
release-20240129.0
release-20240206.*
release-20240206.0
release-20240212.*
release-20240212.0
release-20240305.*
release-20240305.0
release-20240311.*
release-20240311.0
release-20240325.*
release-20240325.0
release-20240401.*
release-20240401.0
release-20240408.*
release-20240408.0
release-20240415.*
release-20240415.0
release-20240422.*
release-20240422.0
release-20240501.*
release-20240501.0
release-20240506.*
release-20240506.0
release-20240513.*
release-20240513.0
release-20240520.*
release-20240520.0
release-20240527.*
release-20240527.0
release-20240603.*
release-20240603.0
release-20240610.*
release-20240610.0
release-20240617.*
release-20240617.0
release-20240624.*
release-20240624.0
release-20240715.*
release-20240715.0
release-20240722.*
release-20240722.0
release-20240729.*
release-20240729.0
release-20240807.*
release-20240807.0
release-20240820.*
release-20240820.0
release-20240826.*
release-20240826.0
release-20240916.*
release-20240916.0
release-20240923.*
release-20240923.0
release-20240930.*
release-20240930.0
release-20241007.*
release-20241007.0
release-20241021.*
release-20241021.0
release-20241028.*
release-20241028.0
release-20241104.*
release-20241104.0
release-20241118.*
release-20241118.0
release-20241202.*
release-20241202.0
release-20241210.*
release-20241210.0
release-20241217.*
release-20241217.0
release-20250106.*
release-20250106.0
release-20250113.*
release-20250113.0
release-20250120.*
release-20250120.0
release-20250127.*
release-20250127.0
release-20250203.*
release-20250203.0
release-20250210.*
release-20250210.0
release-20250217.*
release-20250217.0
release-20250224.*
release-20250224.0
release-20250304.*
release-20250304.0
release-20250319.*
release-20250319.0
release-20250326.*
release-20250326.0
release-20250331.*
release-20250331.0
release-20250407.*
release-20250407.0
release-20250414.*
release-20250414.0
release-20250421.*
release-20250421.0
release-20250429.*
release-20250429.0
release-20250505.*
release-20250505.0
release-20250512.*
release-20250512.0
release-20250611.*
release-20250611.0
release-20250616.*
release-20250616.0
release-20250625.*
release-20250625.0
release-20250707.*
release-20250707.0
release-20250715.*
release-20250715.0
release-20250721.*
release-20250721.0
release-20250804.*
release-20250804.0
release-20250811.*
release-20250811.0
release-20250820.*
release-20250820.0
release-20250915.*
release-20250915.0
release-20250922.*
release-20250922.0
release-20251006.*
release-20251006.0
release-20251013.*
release-20251013.0
release-20251020.*
release-20251020.0
release-20251103.*
release-20251103.0
release-20251110.*
release-20251110.0
release-20251118.*
release-20251118.0
release-20251201.*
release-20251201.0
release-20251208.*
release-20251208.0
release-20251215.*
release-20251215.0
release-20260105.*
release-20260105.0
release-20260112.*
release-20260112.0
release-20260126.*
release-20260126.0
release-20260202.*
release-20260202.0
release-20260209.*
release-20260209.1
release-20260216.*
release-20260216.0
release-20260223.*
release-20260223.0
release-20260302.*
release-20260302.0
release-20260309.*
release-20260309.0
release-20260316.*
release-20260316.0
release-20260323.*
release-20260323.0
release-20260330.*
release-20260330.0
release-20260406.*
release-20260406.0
release-20260413.*
release-20260413.0
release-20260420.*
release-20260420.0
release-20260427.*
release-20260427.0
release-20260504.*
release-20260504.0
release-20260511.*
release-20260511.0
release-20260520.*
release-20260520.0
release-20260525.*
release-20260525.0
release-20260601.*
release-20260601.0
release-20260608.*
release-20260608.0
release-20260615.*
release-20260615.0
release-20260622.*
release-20260622.0
release-20260706.*
release-20260706.0
release-20260714.*
release-20260714.0
release-20260721.*
release-20260721.0
release-20260727.*
release-20260727.0
release-20260803.*
release-20260803.0
release-20260810.*
release-20260810.0
release-20260817.*
release-20260817.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95702.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "191669538624801055180568627906153623931",
                "328440618983553962920736815603843068802",
                "27945722292906554668105809208865582317"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-95702-203b3b25",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed",
        "target":  {
            "file":  "test/syscalls/linux/cgroup.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "151185642224597031032292980886626281306",
                "101528879578568605463910601596368892162",
                "108587633537507210242609878158511307392"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-95702-899981a7",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed",
        "target":  {
            "file":  "test/syscalls/linux/cgroup2.cc"
        }
    }
]
vanir_signatures_modified 
"2026-10-28T11:21:46Z"