CVE-2026-2664: Out of bounds read vulnerability in grpcfuse kernel module
An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an unspecified impact by writing to /proc/docker entries. The issue has been fixed in Docker Desktop 4.62.0 .
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2664?
The severity of CVE-2026-2664 is considered medium, as it allows local attackers to exploit the out of bounds read vulnerability.
How do I fix CVE-2026-2664?
To fix CVE-2026-2664, update Docker Desktop to version 4.61.1 or later.
What software is affected by CVE-2026-2664?
CVE-2026-2664 affects Docker Desktop versions up to and including 4.61.0 on Windows, Linux, and macOS.
What are the potential impacts of CVE-2026-2664?
The potential impacts of CVE-2026-2664 include unauthorized access or manipulation of the system due to the out of bounds read vulnerability.
Is there a workaround for CVE-2026-2664?
Currently, the best course of action for CVE-2026-2664 is to update to a patched version as there are no documented workarounds.