Debian DSA 6443-1: Docker/BuildKit Privilege Escalation & Access Bypass Fixes

Vulnerability Overview Vulnerability ID: DSA 6443-1 Publication Date: August 19, 2026 Description: Multiple vulnerabilities have been identified in the Docker container engine and the bundled BuildKit build tool, which could lead to privilege escalation, arbitrary file access, or bypass of authorization policies. Scope of Impact Affected Software: docker.io Affected Versions: All unpatched versions of docker.io Vulnerability IDs: CVE-2026-33747, CVE-2026-33748, CVE-2026-33997, CVE-2026-34049, CVE-2026-41567, CVE-2026-41568, CVE-2026-42306 Remediation Fixed Version: 26.1.5dfsg1-9~deb13u1 Remediation Advice: Users are advised to upgrade the docker.io package to the fixed version. Additional Information: For more details, please refer to the Debian Security Tracker: https://security-tracker.debian.org/tracker/docker.io Additional Information Mailing List: debian-security-announce@lists.debian.org Security Announcement Page: https://www.debian.org/security/ FAQ Page: https://www.debian.org/security/faq POC Code or Exploitation Code No POC code or exploitation code is included in this advisory. --- Summary: This security advisory highlights multiple critical vulnerabilities in the Docker container engine and BuildKit build tool, which may result in privilege escalation, arbitrary file access, or bypassing authorization policies. Users are strongly recommended to immediately upgrade the docker.io package to version 26.1.5dfsg1-9~deb13u1 to address these issues. For further details, refer to the Debian Security Tracker.

Goal Reached Thanks to every supporter — we hit 100%!

Debian DSA 6443-1: Docker/BuildKit Privilege Escalation & Access Bypass Fixes