CVE-2015-5228

High

Published: 07/06/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The service daemon in CRIU creates log and dump files insecurely, allowing local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.

Risk Assessment

This vulnerability may lead to unauthorized access to files and potential system control by local users.

Recommendation

It is recommended to review and improve the mechanisms for creating log and dump files to ensure proper security against unauthorized access.

Other vulnerabilities in CRIU

CVE-2026-18107High
A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection, allowing it to spoof process credentials saved in the checkpoint image. On restore, the container process gains elevated capabilities and zeroed UIDs/GIDs.

Original NVD description (English source)

The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.