CVE-2015-3631: Docker

Low severity, CVSS 3.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Docker Engine before 1.6.1 allows local users to set arbitrary Linux Security Modules (LSM) and docker_t policies via an image that allows volumes to override files in /proc.

Affected products

• Docker Docker: up to and including 1.6

Published 2015-05-18. Last modified 2026-06-17.