containerd CRI server: Host memory exhaustion through Attach goroutine leak

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2025-64329 · CVE overview and exploitation status

EUVD-2025-38219

GHSA-m6hq-p25p-ffr2

GO-2025-4108

cve-program · CVE-2025-64329

• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df

euvd · EUVD-2025-38219

• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df

nvd · CVE-2025-64329

• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df
• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2

osv · GHSA-m6hq-p25p-ffr2

• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
• https://nvd.nist.gov/vuln/detail/CVE-2025-64329
• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df
• https://github.com/containerd/containerd

osv · GO-2025-4108

• https://github.com/containerd/containerd/security/advisories/GHSA-m6hq-p25p-ffr2
• https://nvd.nist.gov/vuln/detail/CVE-2025-64329
• https://github.com/containerd/containerd/commit/083b53cd6f19b5de7717b0ce92c11bdf95e612df

• containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust m… · Advisory content revised · 15 Nov 2026