PT-2026-45868 · Docker · Docker Desktop

Nitesh Surana · CVE-2026-8936 · Published 2026-06-02 · Updated 2026-06-03

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/R:U

Name of the Vulnerable Software and Affected Versions Docker Desktop versions prior to 4.76.0

Description A VM panic occurs due to unbounded recursion within the grpcfuse kernel module. This happens when a container creates deeply nested directories on a bind-mounted host folder and triggers a dentry invalidation event. Unbounded recursion is a process where a function calls itself without a defined limit, potentially exhausting system resources and causing a crash.

Recommendations Update to version 4.76.0.

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2026-8936

ZDI-26-327

Affected Products

Docker Desktop

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-8936 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-327 · Security Note
• https://docs.docker.com/desktop/release-notes/#4760 · Note
• https://t.me/CVEtracker/55667 · Telegram Post
• https://twitter.com/CVEnew/status/2061993223845728314 · Twitter Post