Checkpoint and Restore Tool for Linux Vulnerability in CRIU by Checkpoint

CVE-2026-73860

What is CVE-2026-73860?

CRIU (Checkpoint/Restore in Userspace) for Linux is susceptible to a code injection vulnerability that allows attackers to exploit the syscall; int3 sequence at the start of an executable virtual memory area. This vulnerability can lead to the execution of malicious code within the target process, particularly in environments where containers are utilized. The attacker can use the injected code to maintain control over execution flow, redirecting calls to a malicious callback. As a result, unauthorized actions can be performed with elevated privileges in environments with relaxed security settings. This critical issue has been addressed in version 4.2.1.

References