Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-93316

Starting daemon with --cdi-disabled flag can lead to panic on specific builds

Description

If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

moby BuildKit

Default version status: unaffected

  • 0 to < 0.33.1affected

References