Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

google/gvisor

              master @ 0830932
            

Fixes

CVEs

HIGH

Peak severity

18.8%

Coverage

Highlights

Authorization Bypass: 10 prior fixes. Scrutinize any change in this area.

pkg/sentry/devices/nvproxy/frontend.go: most-fixed (2 issues). Treat as high-risk during review.

19 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Authorization Bypass: 1 historical fix(es) link pkg/sentry/fsimpl/overlay/filesystem.go to Authorization Bypass.

Authorization Bypass: 1 historical fix(es) link pkg/sentry/syscalls/linux/sys_thread.go to Authorization Bypass.

Authorization Bypass: 1 historical fix(es) link pkg/sentry/socket/netstack/stack.go to Authorization Bypass.