PT-2025-45403 · Unknown+6 · Kubernetes Containerd+5

Wheat2018 · Published 2025-11-06 · Updated 2026-03-10 · CVE-2025-64329

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions containerd versions 1.7.28 and below containerd versions 2.0.0-beta.0 through 2.0.6 containerd versions 2.1.0-beta.0 through 2.1.4 containerd versions 2.2.0-beta.0 through 2.2.0-rc.1

Description containerd, an open-source container runtime, is affected by a bug in the CRI Attach implementation. This issue can lead to memory exhaustion on the host system due to goroutine leaks. The issue affects multiple versions of containerd. An admission controller can be used to control access to pods/attach resources as a workaround.

Recommendations Update to containerd version 1.7.29 or later. Update to containerd version 2.0.7 or later. Update to containerd version 2.1.5 or later. Update to containerd version 2.2.0 or later. Set up an admission controller to control accesses to pods/attach resources.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-69739

AZL-69745

AZL-69973

AZL-69976

BDU:2025-16113

CLEANSTART-2026-EJ58111

CLEANSTART-2026-LL43287

CLEANSTART-2026-OH86281

CVE-2025-64329

DSA-6067-1

ECHO-0C6F-8210-73E6

GHSA-M6HQ-P25P-FFR2

GO-2025-4108

MGASA-2026-0030

OESA-2025-2752

OESA-2025-2753

OESA-2025-2754

OESA-2025-2755

OESA-2025-2756

OPENSUSE-SU-2025:15726-1

SUSE-SU-2025:21042-1

SUSE-SU-2025:21057-1

SUSE-SU-2025:4072-1

SUSE-SU-2025:4288-1

USN-7983-1

Affected Products

Debian

Kubernetes Containerd

Linuxmint

Red Os

Suse

Ubuntu

References · 91

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64329.json · Exploit
• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df · Patch
• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21042-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-64329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47914 · Security Note
• https://ubuntu.com/security/notices/USN-7983-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-69739 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-64329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64329 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4072-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21057-1 · Vendor Advisory