CVE-2026-95702: Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google gVisorto a version that resolves this vulnerability.Fixed in 20260831.0
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
A local attacker with standard container privileges can exploit it. Exploitation requires access to an in-sandbox overlay filesystem.
Which deployments are affected?
Google gVisor versions before release 20260831.0 are affected on all platforms. The issue is in the VFS MemoryFile handling used by the in-sandbox overlay filesystem.
What level of host access does successful exploitation provide?
Successful exploitation can result in code execution in the host sentry process. The sentry process remains constrained by host-level Linux seccomp and namespace boundaries.