CVE-2025-64329Medium

containerd CRI server: Host memory exhaustion through Attach goroutine leak

Published
May 31, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2025-64329 →

🎯 Affected products5

  • azl3 containerd2 2.0.0-14 on Azure Linux 3.0
  • azl3 containerd2 2.0.0-16 on Azure Linux 3.0
  • azl3 moby-containerd-cc 1.7.7-9 on Azure Linux 3.0
  • cbl2 moby-containerd 1.6.26-12 on CBL Mariner 2.0
  • cbl2 moby-containerd-cc 1.7.7-12 on CBL Mariner 2.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 2.0.0-15 KBCBL-Mariner Releases (Security Update) — fixed build 2.0.0-16 KBCBL-Mariner Releases (Security Update) — fixed build 1.7.7-10 KBCBL-Mariner Releases (Security Update) — fixed build 1.6.26-13 KBCBL-Mariner Releases (Security Update) — fixed build 1.7.7-13

🔗 References (2)