Vulnerability in Docker Desktop
CVE-2026-8936
Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories on a bind-mounted host folder and triggered a dentry invalidation event. This issue has been fixed in Docker Desktop 4.76.0.
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
Affected products
- Docker Desktop — versions 4.33.0