Package
falco-no-driver
Component
github.com/containerd/containerd/v2
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
containerd/v2 v2.1.5 is embedded in the prebuilt libcontainer.so; the fix (containerd 2.1.9) can't be applied independently because the latest falcosecurity/plugins release (0.7.1) still pins 2.1.5. Pending an upstream plugins bump to 2.1.9+.
Status
Impact
falco-no-driver itself does not contain any code that is vulnerable to this CVE; however it pulls in the libcontainer plugin from https://github.com/falcosecurity/plugins/tree/main/plugins/container which is vulnerable. The upstream maintainers will need to update github.com/containerd/containerd/v2 to the fixed version (2.1.9). No released container-plugin version (latest is v0.7.1) - nor upstream main - has updated past the vulnerable v2.1.5.
Status