+
gVisor Security Record
+
+
+
+
+
+
+
+
Vulnerabilities Defended by Year
+
An overview of high-impact Linux kernel vulnerabilities mitigated by gVisor over time.
+
+
+
+
+ Defended
+
+
+
+ Unmitigated
+
+
+
+
+
+
+ {% assign valid_cves = site.data.saves.cves | where_exp: "item", "item.cve != nil and item.cve != ''" %}
+ {% assign grouped_cves = valid_cves | group_by_exp: "item", "item.date | slice: 0, 4" %}
+ {% for group in grouped_cves %}
+ {% assign total = group.items | size %}
+ {% assign saved_count = 0 %}
+ {% assign unsaved_count = 0 %}
+ {% for item in group.items %}
+ {% if item.saved %}
+ {% assign saved_count = saved_count | plus: 1 %}
+ {% else %}
+ {% assign unsaved_count = unsaved_count | plus: 1 %}
+ {% endif %}
+ {% endfor %}
+ {% assign total_percentage = total | times: 100.0 | divided_by: 20.0 %}
+ {% assign saved_ratio = saved_count | times: 100.0 | divided_by: total %}
+ {% assign unsaved_ratio = unsaved_count | times: 100.0 | divided_by: total %}
+
+
{{ saved_count }}/{{ total }}
+
+
{{ group.name }}
+
+ {% endfor %}
+
+
+
+
+
+
+
+
+
+ This curated record is not a comprehensive list of all vulnerabilities, but focuses on high-impact CVEs relevant to production Kubernetes environments, specifically tracking critical threats highlighted in official Google Kubernetes Engine (GKE) security bulletins.
+
+
+
+
+
+
+
+ {% for group in grouped_cves %}
+
+
+ {% assign quarter_groups = group.items | group_by_exp: "item", "item.date | slice: 5, 2 | plus: 2 | divided_by: 3 | prepend: 'Q'" %}
+ {% for q_group in quarter_groups %}
+
+
+
+
+ {% for item in q_group.items %}
+
+
+
+
+ {% if item.saved %}
+ Defended
+ {% else %}
+ Unmitigated
+ {% endif %}
+
+
+
+
+
Vulnerability Overview & Impact
+
{{ item.description }}
+ {% if item.saved == false and item.vm_prevented != nil %}
+
VM Runtime Prevented: {% if item.vm_prevented %}Yes{% else %}No{% endif %}
+ {% endif %}
+
+
+
Escalation Vector: {{ item.risk }}
+
Target Ecosystem Scope: {{ item.scope }}
+
+
+
+ {% endfor %}
+
+
+
+ {% endfor %}
+
+
+ {% endfor %}
+
+