Issues

• setpgid() lets a session leader join another process group

  google/gvisor#15566 · Filter by author dany74q opened on Oct 9, 2026

• Overlay layers can show files that locked mounts hide

  google/gvisor#15530 · Filter by author dany74q opened on Oct 8, 2026

• /proc/[pid]/stat flags field is always 0

  google/gvisor#15515 · Filter by author dany74q opened on Oct 8, 2026

• Fresh procfs mount in a user namespace reveals paths hidden by locked mounts

  google/gvisor#15512 · Filter by author dany74q opened on Oct 8, 2026

• systrap on arm64 turns a first syscall argument of -512, -514 or -516 into -4

  google/gvisor#15511 · Filter by author dany74q opened on Oct 8, 2026

• /proc getdents64 returns duplicate stable PID names with partial buffers

  google/gvisor#15504 · Filter by author SPIRITT-lidor opened on Oct 8, 2026

• Block device stays busy after umount if a runsc sandbox was started while it was mounted

  google/gvisor#15497 · Filter by author hxuan190 opened on Oct 8, 2026
  2

• pkg/sleep: goroutineleak profiling causes "bad g->status in ready" on wake-up (Go 1.27)

  type: bug
  google/gvisor#15412 · Filter by author Asutorufa opened on Oct 7, 2026

• kernel: ProcessGroup.ancestors miscounted in createSession/CreateProcessGroup child-walk — an unprivileged process can SIGHUP-kill the sandbox's PID 1

  google/gvisor#15389 · Filter by author amitbloomberg7 opened on Oct 6, 2026

• unlink() of a missing path with a trailing slash returns ENOTDIR instead of ENOENT on gofer mounts

  google/gvisor#15303 · Filter by author ramonmalcolm10 opened on Oct 5, 2026
  3

• Docker-in-Docker-in-gVisor interacts with TSO/GSO, causing loads of fragmentation/retransmissions

  type: bug
  google/gvisor#15253 · Filter by author paultag opened on Oct 3, 2026
  

• FUTEX_WAKE_OP compares the old value as unsigned; Linux compares it as signed

  google/gvisor#15219 · Filter by author tremo1 opened on Oct 2, 2026

• gVisor with small segments, in-window data is dropped without an ACK

  type: bug
  google/gvisor#15144 · Filter by author everanium opened on Sep 30, 2026
  3

• add an optional AI code review bot for PRs

  type: enhancement
  google/gvisor#15056 · Filter by author milantracy opened on Sep 27, 2026

• nvproxy: allow configuring the nvidia-container-cli path

  google/gvisor#15052 · Filter by author kvnloo opened on Sep 27, 2026

• SYN in TIME_WAIT is dropped when the stack accepts through tcp.Forwarder

  type: bug
  google/gvisor#15013 · Filter by author everanium opened on Sep 25, 2026

• runsc: restore spec validation rejects restore when only Process.OOMScoreAdj differs (value is derived from node memory capacity)

  google/gvisor#14995 · Filter by author abhishek-emergent opened on Sep 25, 2026

• RTM_NEWROUTE accepts RTA_DST with neither a gateway nor RTA_OIF

  google/gvisor#14970 · Filter by author dany74q opened on Sep 24, 2026

• RTM_NEWROUTE installs every route type as a unicast route

  google/gvisor#14966 · Filter by author dany74q opened on Sep 24, 2026

• netstack: routes should be deleted whenever an interface goes down

  type: bug
  google/gvisor#14961 · Filter by author rexren-gif opened on Sep 24, 2026

• RTM_NEWROUTE refuses RTA_PREFSRC

  google/gvisor#14933 · Filter by author dany74q opened on Sep 23, 2026

• RTM_NEWROUTE takes a route's source hint from RTA_SRC

  google/gvisor#14931 · Filter by author dany74q opened on Sep 23, 2026

• RTM_NEWROUTE accepts an IPv4 destination with host bits set or under four bytes

  google/gvisor#14929 · Filter by author dany74q opened on Sep 23, 2026

• RTM_NEWROUTE accepts a gateway that no connected route reaches

  google/gvisor#14925 · Filter by author dany74q opened on Sep 23, 2026

• RTM_NEWROUTE takes a route's family from the destination length

  google/gvisor#14921 · Filter by author dany74q opened on Sep 23, 2026