CVE-2026-93323
Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
- State
- Published
- Severity
- 6.8 Medium
- Published
- Oct 5, 2026
- Updated
- Oct 5, 2026
- Reserved
- Sep 17, 2026
Description
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which interrupts other builds on the same instance. Fixed by rejecting such files above 16 MiB.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | Docker |
Weaknesses
- CWE-789 Memory Allocation with Excessive Size Value
Affected Products
| Product | Versions |
|---|---|
BuildKitmoby |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.