CVE-2026-53493
Public on 2026-09-25
Modified on 2026-09-29
Description
containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Docker Extra | containerd | 2026-10-24 | ALAS2DOCKER-2026-153 | Fixed |
| Amazon Linux 2 - Ecs Extra | containerd | 2026-10-24 | ALAS2ECS-2026-145 | Fixed |
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | containerd | 2026-10-24 | ALAS2NITRO-ENCLAVES-2026-125 | Fixed |
| Amazon Linux 2023 | containerd | 2026-10-24 | ALAS2023-2026-3273 | Fixed |
| Amazon Linux 2027 Preview | containerd | 2026-10-26 | ALAS2027-2026-220 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |