{"id":"CVE-2024-40635","aliases":["AZL-58844","AZL-58845","AZL-58867","AZL-60893","AZL-60897","BELL-CVE-2024-40635","DEBIAN-CVE-2024-40635","DLA-4153-1","EUVD-2025-6529","GHSA-265r-hfxg-fhmg","GO-2025-3528","MGASA-2025-0130","OESA-2025-1324","OESA-2025-1325","OESA-2025-1348","OESA-2025-1349","OESA-2025-1350","ROOT-APP-GOBINARY-CVE-2024-40635","ROOT-OS-DEBIAN-12-CVE-2024-40635","SUSE-SU-2025:1345-1","SUSE-SU-2025:1346-1","SUSE-SU-2025:20216-1","SUSE-SU-2025:20459-1","UBUNTU-CVE-2024-40635","USN-7374-1","openSUSE-SU-2025:14910-1","openSUSE-SU-2025:15039-1","openSUSE-SU-2025:15169-1"],"status":"published","title":"containerd has an integer overflow in User ID handling","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","severity":{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00304,"percentile":0.23412,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-190"],"published":"2025-03-17T21:24:42Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"yen5004/CVE-2024-40635_POC","title":"yen5004/CVE-2024-40635_POC","date":"2025-04-30","url":"https://github.com/yen5004/CVE-2024-40635_POC"}],"fixes":[{"ecosystem":"Go","package":"github.com/containerd/containerd/v2","fixed_in":["2.0.4"],"sources":["ghsa","osv"]},{"ecosystem":"Go","package":"github.com/containerd/containerd","fixed_in":["1.7.27","1.6.38"],"sources":["ghsa","osv"]},{"ecosystem":"Azure Linux:2","package":"moby-containerd","fixed_in":["1.6.26-11"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"containerd","fixed_in":["1.7.13-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"containerd2","fixed_in":["2.0.0-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"moby-containerd-cc","fixed_in":["1.7.7-9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"moby-containerd-cc","fixed_in":["1.7.7-11"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"containerd","fixed_in":["2.0.4-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"containerd","fixed_in":["1.6.20~ds1-1+deb12u2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"containerd","fixed_in":["1.7.24~ds1-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"containerd","fixed_in":["1.7.24~ds1-6"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"containerd","fixed_in":["1.4.13~ds1-1~deb11u5"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"docker-containerd","fixed_in":["1.7.27-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"containerd","fixed_in":["1.2.0-321.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"containerd","fixed_in":["1.2.0-219.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"containerd","fixed_in":["1.2.0-321.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"containerd","fixed_in":["1.6.22-16.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"containerd","fixed_in":["1.6.22-16.oe2403sp1"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"rootio-github.com/containerd/containerd","fixed_in":["v1.7.18-root.io.1","v1.7.18-root.io.2"],"sources":["osv"]},{"ecosystem":"Root:Go","package":"github.com/containerd/containerd","fixed_in":["v1.7.18-aikido.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"containerd","fixed_in":["1.7.27-150000.123.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"containerd","fixed_in":["1.7.27-16.100.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"containerd","fixed_in":["1.7.27-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"containerd","fixed_in":["1.7.27-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"containerd","fixed_in":["1.2.6-0ubuntu1~16.04.6+esm5"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"containerd","fixed_in":["1.6.12-0ubuntu1~18.04.1+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"containerd","fixed_in":["1.6.12-0ubuntu1~20.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"containerd-app","fixed_in":["1.7.24-0ubuntu1~20.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"containerd","fixed_in":["1.6.12-0ubuntu1~22.04.8"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"containerd-app","fixed_in":["1.7.24-0ubuntu1~22.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"containerd-app","fixed_in":["1.7.24-0ubuntu1~24.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"containerd","fixed_in":["1.6.24~ds1-1ubuntu1.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"containerd-app","fixed_in":["2.0.2-0ubuntu2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cmctl","fixed_in":["2.2.0-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"containerd","fixed_in":["1.7.27-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/containerd/containerd/v2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containerd/containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.0-beta.0"},{"fixed":"1.7.27"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/containerd/containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.38"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.26-11"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.13-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"containerd2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"moby-containerd-cc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"moby-containerd-cc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.6.10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.2-r1"},{"fixed":"2.0.4-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.20~ds1-1+deb12u2"}]}],"versions":["1.6.20~ds1-1","1.6.20~ds1-1+deb12u1"]},{"source":"osv","ecosystem":"Debian:13","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24~ds1-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24~ds1-6"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13~ds1-1~deb11u5"}]}],"versions":["1.4.12~ds1-1~deb11u1","1.4.13~ds1-1~deb11u1","1.4.13~ds1-1~deb11u2","1.4.13~ds1-1~deb11u3","1.4.13~ds1-1~deb11u4","1.4.5~ds1-2","1.4.5~ds1-2+deb11u1"]},{"source":"osv","ecosystem":"Go","package":"github.com/containerd/containerd/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.4"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containerd/containerd","ranges":[{"type":"SEMVER","events":[{"introduced":"1.7.0-beta.0"},{"fixed":"1.7.27"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containerd/containerd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.38"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containerd/containerd","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.6.38"},{"introduced":"1.7.0-beta.0"},{"fixed":"1.7.27"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/containerd/containerd/v2","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.0.4"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"docker-containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-321.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-219.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-321.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.22-16.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.22-16.oe2403sp1"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"rootio-github.com/containerd/containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v1.7.18-root.io.1"},{"fixed":"v1.7.18-root.io.2"}]}]},{"source":"osv","ecosystem":"Root:Go","package":"github.com/containerd/containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"v1.7.18-aikido.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-150000.123.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-16.100.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-0ubuntu1~16.04.6+esm5"}]}],"versions":["0.2.1-0ubuntu4~16.04","0.2.3-0ubuntu1~16.04","0.2.5-0ubuntu1~16.04.1","1.2.6-0ubuntu1~16.04.2","1.2.6-0ubuntu1~16.04.3","1.2.6-0ubuntu1~16.04.4","1.2.6-0ubuntu1~16.04.5","1.2.6-0ubuntu1~16.04.6","1.2.6-0ubuntu1~16.04.6+esm1","1.2.6-0ubuntu1~16.04.6+esm2","1.2.6-0ubuntu1~16.04.6+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~18.04.1+esm2"}]}],"versions":["0.2.5-0ubuntu2","1.2.6-0ubuntu1~18.04.1","1.2.6-0ubuntu1~18.04.2","1.3.3-0ubuntu1~18.04.1","1.3.3-0ubuntu1~18.04.2","1.3.3-0ubuntu1~18.04.3","1.3.3-0ubuntu1~18.04.4","1.4.4-0ubuntu1~18.04.2","1.5.2-0ubuntu1~18.04.1","1.5.2-0ubuntu1~18.04.2","1.5.2-0ubuntu1~18.04.3","1.5.5-0ubuntu3~18.04.1","1.5.5-0ubuntu3~18.04.2","1.5.9-0ubuntu1~18.04.1","1.5.9-0ubuntu1~18.04.2","1.6.12-0ubuntu1~18.04.1","1.6.12-0ubuntu1~18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~20.04.8"}]}],"versions":["1.2.10-0ubuntu1","1.3.2-0ubuntu1","1.3.3-0ubuntu1","1.3.3-0ubuntu2","1.3.3-0ubuntu2.1","1.3.3-0ubuntu2.2","1.3.3-0ubuntu2.3","1.4.4-0ubuntu1~20.04.2","1.5.2-0ubuntu1~20.04.1","1.5.2-0ubuntu1~20.04.2","1.5.2-0ubuntu1~20.04.3","1.5.5-0ubuntu3~20.04.1","1.5.5-0ubuntu3~20.04.2","1.5.9-0ubuntu1~20.04.1","1.5.9-0ubuntu1~20.04.4","1.5.9-0ubuntu1~20.04.5","1.5.9-0ubuntu1~20.04.6","1.6.12-0ubuntu1~20.04.1","1.6.12-0ubuntu1~20.04.3","1.6.12-0ubuntu1~20.04.5","1.6.12-0ubuntu1~20.04.6","1.6.12-0ubuntu1~20.04.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~20.04.2"}]}],"versions":["1.7.2-0ubuntu1~20.04.1","1.7.12-0ubuntu2~20.04.1","1.7.24-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~22.04.8"}]}],"versions":["1.5.5-0ubuntu3","1.5.9-0ubuntu1","1.5.9-0ubuntu2","1.5.9-0ubuntu3","1.5.9-0ubuntu3.1","1.6.12-0ubuntu1~22.04.1","1.6.12-0ubuntu1~22.04.3","1.6.12-0ubuntu1~22.04.5","1.6.12-0ubuntu1~22.04.6","1.6.12-0ubuntu1~22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~22.04.2"}]}],"versions":["1.7.2-0ubuntu1~22.04.1","1.7.12-0ubuntu2~22.04.1","1.7.24-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~24.04.2"}]}],"versions":["1.7.2-0ubuntu2","1.7.12-0ubuntu1","1.7.12-0ubuntu2","1.7.12-0ubuntu3","1.7.12-0ubuntu4","1.7.12-0ubuntu4.1","1.7.19-0ubuntu1~24.04.1","1.7.19+really1.7.12-0ubuntu4.2","1.7.24-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.24~ds1-1ubuntu1.2+esm1"}]}],"versions":["1.6.20~ds1-1ubuntu2","1.6.24~ds1-1ubuntu1","1.6.24~ds1-1ubuntu1.1","1.6.24~ds1-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.2-0ubuntu2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-0ubuntu1~16.04.6+esm5"}]}],"versions":["0.2.1-0ubuntu4~16.04","0.2.3-0ubuntu1~16.04","0.2.5-0ubuntu1~16.04.1","1.2.6-0ubuntu1~16.04.2","1.2.6-0ubuntu1~16.04.3","1.2.6-0ubuntu1~16.04.4","1.2.6-0ubuntu1~16.04.5","1.2.6-0ubuntu1~16.04.6","1.2.6-0ubuntu1~16.04.6+esm1","1.2.6-0ubuntu1~16.04.6+esm2","1.2.6-0ubuntu1~16.04.6+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~18.04.1+esm2"}]}],"versions":["0.2.5-0ubuntu2","1.2.6-0ubuntu1~18.04.1","1.2.6-0ubuntu1~18.04.2","1.3.3-0ubuntu1~18.04.1","1.3.3-0ubuntu1~18.04.2","1.3.3-0ubuntu1~18.04.3","1.3.3-0ubuntu1~18.04.4","1.4.4-0ubuntu1~18.04.2","1.5.2-0ubuntu1~18.04.1","1.5.2-0ubuntu1~18.04.2","1.5.2-0ubuntu1~18.04.3","1.5.5-0ubuntu3~18.04.1","1.5.5-0ubuntu3~18.04.2","1.5.9-0ubuntu1~18.04.1","1.5.9-0ubuntu1~18.04.2","1.6.12-0ubuntu1~18.04.1","1.6.12-0ubuntu1~18.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~20.04.8"}]}],"versions":["1.2.10-0ubuntu1","1.3.2-0ubuntu1","1.3.3-0ubuntu1","1.3.3-0ubuntu2","1.3.3-0ubuntu2.1","1.3.3-0ubuntu2.2","1.3.3-0ubuntu2.3","1.4.4-0ubuntu1~20.04.2","1.5.2-0ubuntu1~20.04.1","1.5.2-0ubuntu1~20.04.2","1.5.2-0ubuntu1~20.04.3","1.5.5-0ubuntu3~20.04.1","1.5.5-0ubuntu3~20.04.2","1.5.9-0ubuntu1~20.04.1","1.5.9-0ubuntu1~20.04.4","1.5.9-0ubuntu1~20.04.5","1.5.9-0ubuntu1~20.04.6","1.6.12-0ubuntu1~20.04.1","1.6.12-0ubuntu1~20.04.3","1.6.12-0ubuntu1~20.04.5","1.6.12-0ubuntu1~20.04.6","1.6.12-0ubuntu1~20.04.7"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~20.04.2"}]}],"versions":["1.7.2-0ubuntu1~20.04.1","1.7.12-0ubuntu2~20.04.1","1.7.24-0ubuntu1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.12-0ubuntu1~22.04.8"}]}],"versions":["1.5.5-0ubuntu3","1.5.9-0ubuntu1","1.5.9-0ubuntu2","1.5.9-0ubuntu3","1.5.9-0ubuntu3.1","1.6.12-0ubuntu1~22.04.1","1.6.12-0ubuntu1~22.04.3","1.6.12-0ubuntu1~22.04.5","1.6.12-0ubuntu1~22.04.6","1.6.12-0ubuntu1~22.04.7"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~22.04.2"}]}],"versions":["1.7.2-0ubuntu1~22.04.1","1.7.12-0ubuntu2~22.04.1","1.7.24-0ubuntu1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"containerd-app","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.24-0ubuntu1~24.04.2"}]}],"versions":["1.7.2-0ubuntu2","1.7.12-0ubuntu1","1.7.12-0ubuntu2","1.7.12-0ubuntu3","1.7.12-0ubuntu4","1.7.12-0ubuntu4.1","1.7.19-0ubuntu1~24.04.1","1.7.19+really1.7.12-0ubuntu4.2","1.7.24-0ubuntu1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.24~ds1-1ubuntu1.2+esm1"}]}],"versions":["1.6.20~ds1-1ubuntu2","1.6.24~ds1-1ubuntu1","1.6.24~ds1-1ubuntu1.1","1.6.24~ds1-1ubuntu1.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20250318T181448-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cmctl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"containerd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.27-1.1"}]}]}],"products":[{"vendor":"containerd","product":"containerd"},{"vendor":"debian","product":"debian_linux"},{"vendor":"linuxfoundation","product":"containerd"}],"references":[{"url":"https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmg","tags":["x_refsource_CONFIRM","Vendor Advisory","advisory","web","report"]},{"url":"https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da","tags":["x_refsource_MISC","Patch","fix","web","report"]},{"url":"https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20","tags":["x_refsource_MISC","Patch","fix","web","report"]},{"url":"https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a","tags":["x_refsource_MISC","Patch","fix","web","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00005.html","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40635","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-265r-hfxg-fhmg"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-40635","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/40xxx/CVE-2024-40635.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-40635","tags":["advisory"]},{"url":"https://github.com/containerd/containerd","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2025-0130.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34145","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IAMUEOAZJQQS6MSFKLEO72TDYAONTTXF/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1324","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1325","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1348","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1349","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1350","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251345-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239749","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-40635","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20251346-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520216-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520459-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-40635","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40635","tags":["report"]},{"url":"https://github.com/containerd/containerd/commit/11504c3fc5f45634f2d93d57743a998194430b82","tags":["report"]},{"url":"https://github.com/containerd/containerd/commit/9639b9625554183d0c4d8d072dccb84fedd2320f","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7374-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2241","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29786","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/RC2RSYYGKVNWLRKMVUKL6HLQYA3XEF7J/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KIFLOBVIZ7GVH46B2XAPOJIX7YHMZFB2/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-40635","title":"containerd has an integer overflow in User ID handling","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T21:32:37.894Z","modified":"2025-05-04T22:02:39.748Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:07.152829Z"}],"euvd":[{"id":"EUVD-2025-6529","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T21:32:37Z","modified":"2025-05-04T22:02:39Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:51:53.049769Z"}],"ghsa":[{"id":"GHSA-265r-hfxg-fhmg","title":"containerd has an integer overflow in User ID handling","description":"### Impact\nA bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user.\n\n### Patches\nThis bug has been fixed in the following containerd versions: \n\n* 2.0.4 (Fixed in https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20)\n* 1.7.27 (Fixed in https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da)\n* 1.6.38 (Fixed in https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a)\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used and that only trusted users have permissions to import images.\n\n### Credits\nThe containerd project would like to thank [Benjamin Koltermann](https://github.com/p4ck3t0) and [emxll](https://github.com/emxll) for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### References\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","status":"published","published":"2025-03-17T21:24:42Z","modified":"2025-05-26T22:18:09Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:38:44.991725Z"}],"nvd":[{"id":"CVE-2024-40635","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13.15Z","modified":"2026-06-17T07:46:12.817Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:10:45.422466Z"}],"osv":[{"id":"BELL-CVE-2024-40635","status":"published","published":"2025-03-20T05:58:40.9493Z","modified":"2026-01-26T09:34:54.368804Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:20.200735Z"},{"id":"CVE-2024-40635","title":"containerd has an integer overflow in User ID handling","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T21:32:37.894Z","modified":"2026-10-28T02:30:20.573280896Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:41.618074Z"},{"id":"DEBIAN-CVE-2024-40635","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13.15Z","modified":"2026-11-02T12:02:57.11878067Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:43.156294Z"},{"id":"GHSA-265r-hfxg-fhmg","title":"containerd has an integer overflow in User ID handling","description":"### Impact\nA bug was found in containerd where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user.\n\n### Patches\nThis bug has been fixed in the following containerd versions: \n\n* 2.0.4 (Fixed in https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20)\n* 1.7.27 (Fixed in https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4da)\n* 1.6.38 (Fixed in https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51a)\n\nUsers should update to these versions to resolve the issue.\n\n### Workarounds\nEnsure that only trusted images are used and that only trusted users have permissions to import images.\n\n### Credits\nThe containerd project would like to thank [Benjamin Koltermann](https://github.com/p4ck3t0) and [emxll](https://github.com/emxll) for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).\n\n### References\n* https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-40635\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\n* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose)\n* Email us at [security@containerd.io](mailto:security@containerd.io)\n\nTo report a security issue in containerd:\n* [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new)\n* Email us at [security@containerd.io](mailto:security@containerd.io)","status":"published","published":"2025-03-17T21:24:42Z","modified":"2026-09-10T03:50:06.145474067Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:46:33.956911Z"},{"id":"OESA-2025-1324","title":"containerd security update","description":"containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\n\ncontainerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2024-40635)","status":"published","published":"2025-03-21T11:08:25Z","modified":"2026-08-18T01:18:49.722662561Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1325","title":"containerd security update","description":"containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\n\ncontainerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2024-40635)","status":"published","published":"2025-03-21T11:08:25Z","modified":"2026-08-18T01:18:49.493407804Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1348","title":"containerd security update","description":"containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\n\ncontainerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2024-40635)","status":"published","published":"2025-03-29T11:08:26Z","modified":"2026-08-18T01:17:51.133808187Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1349","title":"containerd security update","description":"containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\n\ncontainerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2024-40635)","status":"published","published":"2025-03-29T11:08:26Z","modified":"2026-08-18T01:17:50.870694212Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1350","title":"containerd security update","description":"containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability.  It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.\r\n\r\nSecurity Fix(es):\n\ncontainerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.(CVE-2024-40635)","status":"published","published":"2025-03-29T11:08:26Z","modified":"2026-08-18T01:17:50.873539327Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"ROOT-APP-GOBINARY-CVE-2024-40635","title":"CVE-2024-40635 in rootio-github.com/containerd/containerd - Patched by Root","description":"Root has patched CVE-2024-40635 in the rootio-github.com/containerd/containerd package for Root:Go. Multiple fixed versions available.","status":"published","published":"2026-06-18T13:59:22Z","modified":"2026-06-18T18:15:35.353636007Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2024-40635","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:00Z","modified":"2026-02-04T03:46:09.571809Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:54.69008Z"},{"id":"AZL-58844","title":"CVE-2024-40635 affecting package moby-containerd for versions less than 1.6.26-11","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13Z","modified":"2026-04-21T04:37:08.498916Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-58845","title":"CVE-2024-40635 affecting package containerd for versions less than 1.7.13-8","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13Z","modified":"2026-04-21T04:54:46.975273Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-58867","title":"CVE-2024-40635 affecting package containerd2 for versions less than 2.0.0-8","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13Z","modified":"2026-04-28T17:43:48Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-60893","title":"CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-9","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-60897","title":"CVE-2024-40635 affecting package moby-containerd-cc for versions less than 1.7.7-11","description":"containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.","status":"published","published":"2025-03-17T22:15:13Z","modified":"2026-04-21T04:37:28.366258Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"DLA-4153-1","title":"containerd - security update","status":"published","published":"2025-05-04T00:00:00Z","modified":"2026-03-09T01:18:08.029039Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"GO-2025-3528","title":"containerd has an integer overflow in User ID handling in github.com/containerd/containerd","description":"containerd has an integer overflow in User ID handling in github.com/containerd/containerd","status":"published","published":"2025-03-18T18:14:48Z","modified":"2026-02-04T03:50:47.304274Z","updated_at":"2026-11-02T15:47:01.728182Z"},{"id":"MGASA-2025-0130","title":"Updated docker-containerd packages fix security vulnerability","description":"containerd is an open-source container runtime. A bug was found in\ncontainerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers\nlaunched with a User set as a `UID:GID` larger than the maximum 32-bit\nsigned integer can cause an overflow condition where the container\nultimately runs as root (UID 0). This could cause unexpected behavior\nfor environments that require containers to run as a non-root user. This\nbug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a\nworkaround, ensure that only trusted images are used and that only\ntrusted users have permissions to import images.\n","status":"published","published":"2025-04-10T00:22:57Z","modified":"2026-04-16T04:41:22.093951292Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14910-1","title":"govulncheck-vulndb-0.0.20250318T181448-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20250318T181448-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-19T00:00:00Z","modified":"2026-02-04T02:38:02.936682Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15039-1","title":"cmctl-2.2.0-1.1 on GA media","description":"These are all security issues fixed in the cmctl-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-30T00:00:00Z","modified":"2026-02-04T12:14:18.013918Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15169-1","title":"containerd-1.7.27-1.1 on GA media","description":"These are all security issues fixed in the containerd-1.7.27-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-27T00:00:00Z","modified":"2026-03-23T04:53:26.705914Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2024-40635","title":"CVE-2024-40635 in rootio-containerd - Patched by Root","description":"Root has patched CVE-2024-40635 in the rootio-containerd package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-01-28T12:37:28Z","modified":"2026-08-27T14:00:05.31171388Z","updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"SUSE-SU-2025:1345-1","title":"Security update for containerd","description":"This update for containerd fixes the following issues:\n\n- CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749) \n  \nOther fixes:\n- Update to containerd v1.7.27.\n","status":"published","published":"2025-04-17T15:14:43Z","modified":"2026-02-04T03:53:41.584121Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:1346-1","title":"Security update for containerd","description":"This update for containerd fixes the following issues:\n\n- CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749) \n  \nOther fixes:\n- Update to containerd v1.7.27.\n","status":"published","published":"2025-04-17T15:15:09Z","modified":"2026-02-04T02:43:31.648173Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20216-1","title":"Security update for containerd","description":"This update for containerd fixes the following issues:\n\n- Updated containerd to v1.7.27.\n- CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749).\n","status":"published","published":"2025-04-30T09:17:09Z","modified":"2026-03-23T04:47:11.340593Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2025:20459-1","title":"Security update for containerd","description":"This update for containerd fixes the following issues:\n\n- Updated to version 1.7.27:\n  * CVE-2024-40635: Fixed integer overflow in User ID handling (bsc#1239749)\n","status":"published","published":"2025-07-01T11:27:44Z","modified":"2026-03-23T04:50:09.349703Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"USN-7374-1","title":"containerd vulnerability","description":"Benjamin Koltermann discovered that containerd incorrectly handled large\nuser id values. This could result in containers possibly being run as root,\ncontrary to expectations.\n","status":"published","published":"2025-03-26T18:53:21Z","modified":"2026-06-25T13:32:30.295754965Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}