PT-2024-15255 · Google+1 · Gvisor Sandbox+1

Published 2024-05-15 · Updated 2025-07-22 · CVE-2023-7258

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gvisor Sandbox (affected versions not specified)

Description A denial of service issue exists due to a bug in reference counting code in mount point tracking, which could lead to a panic. This makes it possible for an attacker running as root and with permission to mount volumes to kill the sandbox.

Recommendations We recommend upgrading past commit 6a112c60a257dadac59962e0bc9e9b5aee70b5b6 to resolve the issue.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-7258

Affected Products

Debian

Gvisor Sandbox

References · 10

• https://github.com/google/gvisor/commit/6a112c60a257dadac59962e0bc9e9b5aee70b5b6 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-7258 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-7258 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-7258 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-7258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-7258 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-7258 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-7258 · Security Note
• https://t.me/cveNotify/129897 · Telegram Post
• https://t.me/cvenotify/79885 · Telegram Post