CVE-2026-18107

A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the checkpoint image. On restore, the container process gains elevated capabilities and zeroed UIDs/GIDs. The practical impact on Red Hat products is limited by several factors: checkpoint/restore requires root privileges (podman) or cluster-admin RBAC (OpenShift) to trigger and cannot be initiated from within the container itself; on OpenShift prior to 4.17 the feature required explicit opt-in, and on 4.17+ the kubelet checkpoint API RBAC is not configured by default; OpenShift enforces user namespaces by default for regular workloads (hostUsers is gated behind admin-only SCCs), which makes the spoofed capabilities namespace-scoped and ineffective for privilege escalation; SELinux type enforcement (container_t) blocks privilege transitions independently of capabilities; seccomp filters persist through checkpoint/restore and cannot be corrupted via the parasite; and kernel mount namespace ownership checks on RHEL 9/10 kernels prevent mount-based container escape even with spoofed capabilities.

• CWE-269

• https://access.redhat.com/security/cve/CVE-2026-18107
• https://bugzilla.redhat.com/show_bug.cgi?id=2508140
• https://github.com/checkpoint-restore/criu/pull/3097

Published

Jul 28, 2026

Last Modified

Jul 30, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-18085An Improper Input Validation in the BlackBerry UEM Managemen…5.9
• CVE-2026-18089Net::SAML2 versions before 0.86 for Perl allow SAML authenti…7.5
• CVE-2026-1809The HTML Tag Shortcodes plugin for WordPress is vulnerable t…6.4
• CVE-2026-18092Net::SAML2 versions before 0.86 for Perl allow SAML authenti…8.1
• CVE-2026-1810A vulnerability was detected in bolo-blog bolo-solo up to 2.…8.8
• CVE-2026-18103A flaw was found in dhcp-server. A remote attacker with netw…4.9
• CVE-2026-18108Net::SAML2 versions before 0.86 for Perl allow authenticatio…9.8
• CVE-2026-1811A flaw has been found in bolo-blog bolo-solo up to 2.6.4. Th…8.8
• CVE-2026-1812A vulnerability has been found in bolo-blog bolo-solo up to …9.8
• CVE-2026-18125An out-of-bounds read in the Agent of Ivanti Endpoint Manage…7.5
• CVE-2026-18127External control of a filename in the Core of Ivanti Endpoin…7.7
• CVE-2026-18129Cleartext transmission of sensitive information in the Core …8.1