CVE-2026-8936

Vulnerability Description

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0.

Related Weaknesses (CWE)

CWE-674

References

https://docs.docker.com/desktop/release-notes/#4760

FAQ

What is CVE-2026-8936?

CVE-2026-8936 is a documented vulnerability. Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event....

How severe is CVE-2026-8936?

CVSS scoring is not yet available for CVE-2026-8936. Check NVD for updates.

Is there a patch for CVE-2026-8936?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.