Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Linux GPU Security Fix Prevents Stale Mappings Across Containers
A Linux GPU security fix changes how AMD’s Kernel Fusion Driver (KFD) tracks shared mappings when several containers use one device.
AlmaLinux 8 Container-Tools Important Security Fix CVE-2019-5736
container-tools:rhel8 security and bug fix update
How Container Restore Can Reopen Privilege Escalation Paths
Privilege escalation in a container does not always begin with a new exploit.
What CRIU Restores Beyond Application Memory in Linux Containers
Linux containers can be paused, checkpointed, and rebuilt later with CRIU.
Why Container Security Needs a Separate Restore Boundary
A container normally starts under the security rules of the system receiving it.
crun Tightens GPU Security for Containers Running in MicroVMs
The crun container runtime has changed how GPU-enabled workloads launch a key graphics helper.
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere e…
Docker Sandboxes Flaw Lets a Guest Reach Host Unix Sockets
Docker has fixed a high-severity Docker Sandboxes vulnerability that allowed a malicious guest to redirect a host-side relay toward Unix sockets outside its au…
Container Security Failure Could Let a Malicious Image Reach the Linux Host
Container security can fail before a workload fully enters its root filesystem, the private file tree the container is meant to see.
Kata Containers Flaw Weakens Container Security With Host-Chosen Mounts
A flaw in Kata Containers weakened container security in some Confidential Containers deployments. It allowed a malicious host operator to make the protected g…
SUSE Docker Important Security Update SUSE-SU-2026-3668-1
SUSE announces a critical update for Docker, addressing security issues by rebuilding it against the latest Go security release, applicable to various SUSE Lin…
openSUSE Kubevirt Container Disk Moderate Security Update 2026-11520-1
An update for kubevirt1.9-container-disk on openSUSE Tumbleweed addresses 10 security vulnerabilities, improving system security with various package installat…
Debian docker.io Important Privilege Escalation File Access Vuln DSA-6443-1
Debian issued a security advisory for docker.io addressing multiple vulnerabilities that could lead to privilege escalation and unauthorized file access, urgin…
Public SCTPhantom Exploit Tests Linux Container Security Defaults
Public exploit code is now available for SCTPhantom, a Linux kernel flaw that researchers used to escape an unprivileged container and take control of the unde…
openSUSE kubevirt1.8-container-disk Moderate Security Update 2026-11392-1
A security update for openSUSE Tumbleweed addresses three vulnerabilities in kubevirt1.8-container-disk-1.8.4-3.1, enhancing system protection against identifi…
Critical Gitea Docker Authentication Bypass: An Open Door to Your Infrastructure
If you’re running Gitea in a container, stop what you’re doing and check your versioning right now. We’re looking at a critical vulnerability—CVE-2026-20896—sh…
Gitea Docker Vulnerability Now Under Active Probing, CVE-2026-20896
A critical flaw in Gitea's official Docker image let anyone impersonate an admin with one forged header. Sysdig spotted the first exploitation attempts 13 days…
Rocky Linux Container Tools Important Security Update RLSA-2026-35833
Important: container-tools:rhel8 security update
Rocky Linux container-tools Important DoS Issues RLSA-2026-33722
Important: container-tools:rhel8 security, bug fix, and enhancement update
Rocky Linux 8 Important Container Tools Security Update RLSA-2026-33722
Important: container-tools:rhel8 security, bug fix, and enhancement update
Fedora 44 Kernel Significant Repair for Container Escape 2026-7ae597d1d2
The 7.0.14-101/201 kernel builds contain a fix for an unprivileged container / jail escape. This has not been assigned a CVE number yet, but a POC is in the wi…
Rocky Linux 8 container-tools Denial Of Service Update RLSA-2026-33722
Important: container-tools:rhel8 security, bug fix, and enhancement update
Rocky Linux 8 RLSA-2026-33722 Important Container-Tools Security Update
Important: container-tools:rhel8 security, bug fix, and enhancement update
Rocky Linux container-tools Key Denial of Service Advisories 2026-33722
Important: container-tools:rhel8 security, bug fix, and enhancement update