Patchfirst
Patchfirst
ChaincontainerdGo:github.com/containerd/containerd

containerd: related fixes (2021–2024)

7 CVEs over 5 generations, 5 Jan 2022 to 17 Mar 2025.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2021-438165 Jan 2022 First in the chain
  2. CVE-2022-361099 Sep 2022 No direct link to an earlier CVE
  3. CVE-2022-298913 Sep 2022 No direct link to an earlier CVE
  4. CVE-2022-299013 Sep 2022 related to CVE-2022-36109related to CVE-2022-2989
  5. CVE-2022-299519 Sep 2022 related to CVE-2022-2990
  6. CVE-2023-2517316 Feb 2023 related to CVE-2022-36109related to CVE-2022-2989and 3 more
  7. CVE-2024-4063517 Mar 2025 related to CVE-2023-25173
Jan 2022JulOctJan 2023AprJan 2024Jan 2025 CVE-2022-36109 → CVE-2022-2990: related (high confidence)CVE-2022-36109 → CVE-2023-25173: related (high confidence)CVE-2022-2989 → CVE-2022-2990: related (high confidence)CVE-2022-2989 → CVE-2023-25173: related (high confidence)CVE-2022-2990 → CVE-2022-2995: related (high confidence)CVE-2022-2990 → CVE-2023-25173: related (high confidence)CVE-2022-2995 → CVE-2023-25173: related (high confidence)CVE-2021-43816 → CVE-2023-25173: related (medium confidence)CVE-2023-25173 → CVE-2024-40635: related (medium confidence) CVE-2021-43816 5 Jan 2022 CVE-2022-36109 9 Sep 2022 CVE-2022-2989 13 Sep 2022 CVE-2022-2990 13 Sep 2022 CVE-2022-2995 19 Sep 2022 CVE-2023-25173 16 Feb 2023 CVE-2024-40635 17 Mar 2025 Jan 2022AprJulOctJan 2023AprOctApr 2024Jan 2025 CVE-2022-36109 → CVE-2022-2990: related (high confidence)CVE-2022-36109 → CVE-2023-25173: related (high confidence)CVE-2022-2989 → CVE-2022-2990: related (high confidence)CVE-2022-2989 → CVE-2023-25173: related (high confidence)CVE-2022-2990 → CVE-2022-2995: related (high confidence)CVE-2022-2990 → CVE-2023-25173: related (high confidence)CVE-2022-2995 → CVE-2023-25173: related (high confidence)CVE-2021-43816 → CVE-2023-25173: related (medium confidence)CVE-2023-25173 → CVE-2024-40635: related (medium confidence) CVE-2021-43816 5 Jan 2022 CVE-2022-36109 9 Sep 2022 CVE-2022-2989 13 Sep 2022 CVE-2022-2990 13 Sep 2022 CVE-2022-2995 19 Sep 2022 CVE-2023-25173 16 Feb 2023 CVE-2024-40635 17 Mar 2025
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2021-43816 5 Jan 2022 Improper Preservation of Permissions in containerd · fixed in 1.5.9 First in chain 21.3
CVE-2022-36109 9 Sep 2022 Moby vulnerability relating to supplementary group permissions · fixed in 20.10.18+incompatible First in chain 16.5
CVE-2022-2989 13 Sep 2022 An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive… · fixed in 3.0.1 First in chain 10.0
CVE-2022-2990 13 Sep 2022 An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive… · fixed in 1.27.1 CVE-2022-36109 · related · High 5.7
CVE-2022-2995 19 Sep 2022 Incorrect handling of the supplementary groups in the CRI-O container engine might lead to sensitive information… · fixed in 1.25.0 CVE-2022-2990 · related · High 11.5
CVE-2023-25173 16 Feb 2023 containerd supplementary groups are not set up properly · fixed in 1.6.18 CVE-2022-36109 · related · High 12.8
CVE-2024-40635 17 Mar 2025 containerd has an integer overflow in User ID handling · fixed in 1.7.27 CVE-2023-25173 · related · Medium 12.9
↑ ↓ chooseEnter openEsc close