Unrated severityNVD Advisory· Published Jan 30, 2025· Updated Feb 24, 2025

Improved Seeding and Hashing In gVisor

CVE-2024-10026

Description

A weak hashing algorithm and small sizes of seeds/secrets in Google's gVisor allowed for a remote attacker to calculate a local IP address and a per-boot identifier that could aid in tracking of a device in certain circumstances.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Gvisorllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Release 20241028.0

Patches

Vulnerability mechanics

References

github.com/google/gvisor/commit/83f75082e5b03fafca9201d9d9939028f712b0b2mitre
github.com/google/gvisor/commit/e54bfde79278cafadedbf73c68ee10cb5982f2afmitre
github.com/google/gvisor/commit/f956b5ac17ae1f60a4d21999b59ba18c55f86d56mitre
www.ndss-symposium.org/wp-content/uploads/2025-122-paper.pdfmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000