Docker Desktop grpcfuse Kernel Module Out of Bounds Read Vulnerability

A vulnerability allowing out of bounds read has been identified in the grpcfuse kernel module of the Linux VM in Docker Desktop. This issue affects versions prior to 4.61.0 on Windows, Linux, and macOS. The vulnerability could enable a local attacker to cause an unspecified impact by writing to /proc/docker entries.

Impact

Exploitation of this vulnerability could lead to unintended memory access, potentially allowing a local attacker to manipulate or disrupt processes by writing to specific /proc/docker entries.

Remediation

Users can upgrade to Docker Desktop version 4.62.0 or later to address this vulnerability.