CVE-2015-5228
HighSummary
The service daemon in CRIU creates log and dump files insecurely, allowing local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.
Risk Assessment
This vulnerability may lead to unauthorized access to files and potential system control by local users.
Recommendation
It is recommended to review and improve the mechanisms for creating log and dump files to ensure proper security against unauthorized access.
Other vulnerabilities in CRIU
See all- CVE-2026-73860Medium
CRIU before 4.2.1 injects a syscall;int3 sequence at the start of the first executable virtual memory area and resumes the target process to execute parasite code. Malicious code in the target process can keep an rseq critical section armed over the injection point, redirecting execution to an attacker-controlled callback when CRIU resumes the process.
- CVE-2026-18107High
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection, allowing it to spoof process credentials saved in the checkpoint image. On restore, the container process gains elevated capabilities and zeroed UIDs/GIDs.
Original NVD description (English source)
The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS