Back Linuxsecurity

Fedora 42 containernetworking-plugins 2026

Linuxsecurity •LinuxSecurity Advisories • March 25, 2026

Reference and example networking plugins, maintained by the CNI team. The CNI (Container Network Interface) project consists of a specification and libraries for writing plugins to configure network interfaces in Linux containers, along with a number of supported plugins. CNI concerns itself only with network connectivity of containers and removing allocated resources when the container is deleted. Update Information : Update to release v1.9.1

Reference and example networking plugins, maintained by the CNI team.

The CNI (Container Network Interface) project consists of a specification

and libraries for writing plugins to configure network interfaces in Linux

containers, along with a number of supported plugins. CNI concerns itself

only with network connectivity of containers and removing allocated resources

when the container is deleted.

Update to release v1.9.1

* Mon Mar 16 2026 Bradley G Smith - 1.9.1-1 - Update to release v1.9.1 - Resolves: rhbz#2448053, rhbz#2423997, rhbz#2424031 - Upstream fixes * Mon Feb 2 2026 Maxwell G - 1.9.0-4 - Rebuild for * Fri Jan 16 2026 Fedora Release Engineering - 1.9.0-3 - Rebuilt for * Fri Jan 16 2026 Fedora Release Engineering - 1.9.0-2 - Rebuilt for

[ 1 ] Bug #2423997 - [Minor Incident] CVE-2025-52881 containernetworking-plugins: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [fedora-42] [ 2 ] Bug #2424031 - [Minor Incident] CVE-2025-52881 containernetworking-plugins: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [fedora-43] [ 3 ] Bug #2448053 - containernetworking-plugins-1.9.1 is available

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7ed700921c' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerability in Fedora Container Networking Plugins Fedora's container networking plugins have been updated to version 1.9.1 to address a critical vulnerability, CVE-2025-52881, which allows for container escape and denial of service through arbitrary write gadgets and procfs write redirects. This vulnerability affects both Fedora 42 and Fedora 43 systems. The issue was first published on November 6, 2025, with a proof of concept released shortly thereafter on November 12, 2025. The updates resolve multiple reported bugs associated with this vulnerability. Users are advised to upgrade their systems to mitigate potential exploitation. The update can be installed using the 'dnf' update program with the provided advisory command. Failure to update may leave systems exposed to attacks leveraging this vulnerability. 2 sources 70

Extracted Entities

Attack Types (1)

DDoS

CVEs (1)

CVE-2025-52881