---
title: "CVE-2026-15801\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2026-15801?format=md
keywords: index, follow
---

# CVE-2026-15801

Publication date 21 September 2026

Last updated 21 September 2026

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

## Cvss 3 Severity Score

**8.0 · High**

[Score breakdown](https://ubuntu.com/security/CVE-2026-15801?format=md#impact-score)

Toggle side navigation

## Description

A vulnerability was found in CRI-O related to the container checkpoint and
restore feature. When CRI-O is configured to restore containers from
checkpoint archives, insufficient validation of restore metadata may allow
a user with sufficient privileges to perform unintended operations on the
host filesystem. Successful exploitation requires that container checkpoint
and restore functionality is enabled, which is not the default
configuration. An attacker must also be able to trigger restoration of a
container from untrusted checkpoint content.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| cri-o | 26.04 LTS resolute | Not in release |
| 24.04 LTS noble | Not in release |
| 22.04 LTS jammy | Not in release |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Severity score breakdown

CVSS version:
CVSS v3.0

**Base score**

8.0 · High

* Base metrics

  | Parameter | Value |
  | --- | --- |
  | Attack vector | Network |
  | Attack complexity | High |
  | Privileges required | High |
  | User interaction | None |
  | Scope | Changed |
  | Confidentiality impact | High |
  | Integrity impact | High |
  | Availability impact | High |
* Scores

  | Parameter | Value |
  | --- | --- |
  | Base score | 8.0 · High |
  | Exploitability score | - |
  | Impact score | - |

**Vector:** CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15801)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-15801)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2026-15801)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2026-15801)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2026-15801>
* <https://access.redhat.com/security/cve/CVE-2026-15801>
* <https://bugzilla.redhat.com/show_bug.cgi?id=2500823>