Back Linuxsecurity Addressing Security Flaw in Ubuntu 25.10 containerd for Unauthorised Access
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in containerd. Software Description: - containerd: open and reliable container runtime library - containerd-app: open and reliable container runtime Details: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access to the files. (CVE-2024-25621) It was discovered that containerd did not properly handle the execution of the goroutine of container attach. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-64329)
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in containerd. Software Description: - containerd: open and reliable container runtime library - containerd-app: open and reliable container runtime Details: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access to the files. (CVE-2024-25621) It was discovered that containerd did not properly handle the execution of the goroutine of container attach. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-64329)
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 containerd 2.1.3-0ubuntu3.1 golang-github-containerd-containerd-dev 1.7.24~ds1-8ubuntu1.1 Ubuntu 24.04 LTS containerd 1.7.28-0ubuntu1~24.04.2 golang-github-containerd-containerd-dev 1.6.24~ds1-1ubuntu1.3+esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS containerd 1.7.28-0ubuntu1~22.04.1+esm1 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~22.04.10 Ubuntu 20.04 LTS containerd 1.7.24-0ubuntu1~20.04.2+esm1 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~20.04.8+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS containerd 1.6.12-0ubuntu1~18.04.1+esm3 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~18.04.1+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS containerd 1.2.6-0ubuntu1~16.04.6+esm6 Available with Ubuntu Pro golang-github-docker-containerd-dev 1.2.6-0ubuntu1~16.04.6+esm6 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 containerd 2.1.3-0ubuntu3.1 golang-github-containerd-containerd-dev 1.7.24~ds1-8ubuntu1.1 Ubuntu 24.04 LTS containerd 1.7.28-0ubuntu1~24.04.2 golang-github-containerd-containerd-dev 1.6.24~ds1-1ubuntu1.3+esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS containerd 1.7.28-0ubuntu1~22.04.1+esm1 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~22.04.10 Ubuntu 20.04 LTS containerd 1.7.24-0ubuntu1~20.04.2+esm1 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~20.04.8+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS containerd 1.6.12-0ubuntu1~18.04.1+esm3 Available with Ubuntu Pro golang-github-containerd-containerd-dev 1.6.12-0ubuntu1~18.04.1+esm3 Available with Ubuntu Pro Ubuntu 16.04 LTS containerd 1.2.6-0ubuntu1~16.04.6+esm6 Available with Ubuntu Pro golang-github-docker-containerd-dev 1.2.6-0ubuntu1~16.04.6+esm6 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
