Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
kata-containers-preview can be forced to consume unlimited memory
published 1 month ago
Summary
The preview version of Kata Containers may allow an attacker to request an excessively large amount of memory, causing the system to run out of resources. This can affect the stability of your workloads running in the container environment. upgrade to the latest Kata Containers release that includes the fixed Apache Thrift version.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kata-containers-preview | <= 3.27.0~preview2-2 |
Original advisory text
CVE-2026-82458 affecting package kata-containers-preview 3.27.0~preview2-2
Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade to version 0.25.0, which fixes the issue.
References
Timeline
Published2 Oct 2026
Updated7 Oct 2026
First seen7 Oct 2026
Sources
AZL-106026 · OSV
Track software like this
Free during beta