SUSE Releases Security Update for Containerd to Fix Five Vulnerabilities

SUSE has released a security update for containerd on October 28, 2026. This update addresses five vulnerabilities identified in the container runtime environment, with exploitation reported in SUSE Bugzilla.

The vulnerabilities include CVE-2026-39882, which can cause memory exhaustion through uncapped HTTP response body reading, and CVE-2026-47262, which allows for a Denial of Service (DoS) condition via a maliciously crafted image.

Additionally, CVE-2026-53493 can lead to high CPU and memory usage during PullImage operations, causing prolonged ContainerCreating stalls. CVE-2026-53495 results in a Goroutine leak, potentially leading to node-level DoS.

CVE-2026-95838 introduces superlinear time complexity in the unpack handler, which may also result in a DoS condition. The CVSS scores for these vulnerabilities range from 4.8 to 6.9.