CVE-2026-95702: Double Free

Description

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

Is your site exposed to CVE-2026-95702?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-415 CWE-415

CWE-416 Use After Free

References

Other References

https://github.com/google/gvisor/commit/25c75149bc0eeaa6a3a49b9bbe3473588b2af6df https://github.com/google/gvisor/commit/90bc4fc36fe442257a06ba15df00371561c183ed https://github.com/google/gvisor/commit/e4efb89c787ef15b09e68d561f1303380e1d5a77

Frequently Asked Questions

What is CVE-2026-95702? +

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The sentry process remains confined by host-level Linux seccomp and namespace boundaries.

How do I check if I'm vulnerable to CVE-2026-95702? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-12659

A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when …

CVE-2025-2027

A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending …

CVE-2025-8058

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if …

CVE-2026-11388

Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before …

CVE-2026-104113

A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the …

CVE-2026-19316

A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of …

CVE-2026-95702