{"id":"CVE-2026-112917","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-112917","generatedAt":"2026-11-04T11:49:46.445Z","title":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK.","description":"In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to bypass the default seccomp restriction on AF_VSOCK. This can expose host-facing services and Windows files accessible to the logged-in user. The issue affects x86-64 WSL2; LinuxKit-based backends are unaffected. The issue is fully fixed only with Docker Desktop 4.98.0 or later and WSL 3.0.3 or later. Docker Desktop 4.98.0 or later running on an older WSL remains affected.","published":"2026-11-03T19:17:54.000Z","lastModified":"2026-11-04T05:18:29.000Z","status":"Received","sourceIdentifier":"security@docker.com","cvss":{"version":"4.0","score":9.2,"severity":"CRITICAL","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-424"],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unscored. Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-11-03T19:17:54.000Z","detail":{"score":"9.2","severity":"CRITICAL","publishedAt":"2026-11-03T19:17:53.727Z"},"summary":"New CVE, critical severity (CVSS 9.2)."}],"references":[{"url":"https://docs.docker.com/desktop/release-notes/#4980","source":"security@docker.com"},{"url":"https://github.com/microsoft/WSL/releases/tag/3.0.3","source":"security@docker.com"},{"url":"https://github.com/microsoft/WSL2-Linux-Kernel/releases/tag/linux-msft-wsl-6.18.54.1","source":"security@docker.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-112917","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}