CVE-2026-8936 — Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM

CVE-2026-8936

Unbounded recursion in grpcfuse kernel module allows container to crash Docker Desktop VM PUBLISHED

Description (CNA)

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0.

Affected (CNA)

Vendor / product	Versions
Docker / Docker Desktop	affected 4.33.0 before 4.76.0

CWE

CWE-674

References

https://docs.docker.com/desktop/release-notes/#4760

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.