CVE-2024-10026: Google Gvisor

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.

Affected products

• Google Gvisor: before 20231030.0 (fixed in 20231030.0); from 20231106.0, before 20231204.0 (fixed in 20231204.0)

Published 2025-01-30. Last modified 2026-06-17.