RAPL Accessibility in github.com/containerd/containerd
Summary
GO-2023-2412: RAPL accessibility in github.com/containerd/containerd. Affects github.com/containerd/containerd across 2 version ranges.
< 1.6.26
>= 1.7.0, < 1.7.11
Fixed in 1.6.26 or 1.7.11, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is github.com/containerd/containerd, which is written in Go. It is a container runtime that provides a platform-agnostic API for managing containers. It is widely used in various containerization platforms and tools. This vulnerability affects versions 0.x and 1.7.0 to 1.7.10 of the package.
Vulnerability Detail
The vulnerability in github.com/containerd/containerd allows unauthorized access to the Running Average Power Limit (RAPL) interface. This interface is used for power management and monitoring on certain hardware platforms. An attacker with access to the container runtime can exploit this vulnerability to gain unauthorized control over power management settings, potentially leading to denial of service or other malicious activities.
How To Fix
Latest published version: v1.7.36 as of 22 Oct 2026
go get github.com/containerd/containerd@v1.7.36Upgrading to it may include breaking changes; the versions below are the minimum fixed release for this vulnerability.
If you can't move to the latest
The minimum fixed version depends on the release line you run.
-
< 1.6.261.6.26go get github.com/containerd/containerd@v1.6.26 -
>= 1.7.0, < 1.7.111.7.11go get github.com/containerd/containerd@v1.7.11
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in github.com/containerd/containerd allows unauthorized access to the RAPL interface, potentially leading to malicious activities. It is recommended to update the package to the latest version to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for github.com/containerd/containerd →
FAQ
github.com/containerd/containerd is a container runtime written in Go that provides a platform-agnostic API for managing containers.
This vulnerability allows unauthorized access to the RAPL interface, which can lead to unauthorized control over power management settings and potential denial of service or other malicious activities.
Versions 0.x and 1.7.0 to 1.7.10 of github.com/containerd/containerd are affected by this vulnerability.
To fix this vulnerability, update the package to version 1.6.26 or 1.7.11, which contain the necessary security patches.
No specific workaround is mentioned for this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for github.com/containerd/containerd.
