Alerts This Week
Warning Icon 1 1,295
Alerts This Week
Warning Icon 1 1,295

Addressing Security Flaw in Ubuntu 25.10 containerd for Unauthorised Access

ubuntu
Calendar Grey January 29, 2026
Dist Ubuntu Esm H88
Security issues in containerd have been fixed; update your Ubuntu systems to maintain security and integrity.
Several security issues were fixed in containerd.

Summary

Several security issues were fixed in containerd.

Software Description:

- containerd: open and reliable container runtime library

- containerd-app: open and reliable container runtime

Details:

David Leadbeater discovered that containerd incorrectly set certain

directory path permissions. An attacker could possibly use this issue to

achieve unauthorised access to the files. (CVE-2024-25621)

It was discovered that containerd did not properly handle the execution

of the goroutine of container attach. An attacker could possibly use this

issue to cause a denial of service. (CVE-2025-64329)

Topics%20covered

Topics Covered

security advisory unauthorized access DoS Ubuntu important containerd

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  containerd                      2.1.3-0ubuntu3.1
  golang-github-containerd-containerd-dev  1.7.24~ds1-8ubuntu1.1

Ubuntu 24.04 LTS
  containerd                      1.7.28-0ubuntu1~24.04.2
  golang-github-containerd-containerd-dev  1.6.24~ds1-1ubuntu1.3+esm2
                                  Available with Ubuntu Pro

Ubuntu 22.04 LTS
  containerd                      1.7.28-0ubuntu1~22.04.1+esm1
                                  Available with Ubuntu Pro
  golang-github-containerd-containerd-dev  1.6.12-0ubuntu1~22.04.10

Ubuntu 20.04 LTS
  containerd                      1.7.24-0ubuntu1~20.04.2+esm1
                                  Available with Ubuntu Pro
  golang-github-containerd-containerd-dev  1.6.12-0ubuntu1~20.04.8+esm1
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  containerd                      1.6.12-0ubuntu1~18.04.1+esm3
                                  Available with Ubuntu Pro
  golang-github-containerd-containerd-dev  1.6.12-0ubuntu1~18.04.1+esm3
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  containerd                      1.2.6-0ubuntu1~16.04.6+esm6
                                  Available with Ubuntu Pro
  golang-github-docker-containerd-dev  1.2.6-0ubuntu1~16.04.6+esm6
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7983-1

CVE-2024-25621, CVE-2025-64329

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7983-1

Topics%20covered

Topics Covered

security advisory unauthorized access DoS Ubuntu important containerd

Package Information

https://launchpad.net/ubuntu/+source/containerd-app/2.1.3-0ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here