Issues

• bitmap: FlipRange/ClearRange panic with index out of range when end == Size()

  google/gvisor#17400 · Filter by author 0z5a opened on Nov 10, 2026

• hostarch: AddrRangeSeq.DropFirst(0) does not omit a zero-length head left by TakeFirst; usermem.CopyInVec spins

  google/gvisor#17399 · Filter by author 0z5a opened on Nov 10, 2026

• kernel: reparenting does not update ProcessGroup.ancestors; a later exit spuriously SIGHUPs a non-orphaned process group

  google/gvisor#17359 · Filter by author tnzi opened on Nov 10, 2026

• pgalloc: fully released huge-page ranges can remain unavailable for reuse

  google/gvisor#17275 · Filter by author hky1999 opened on Nov 9, 2026

• netlink: bind with RTMGRP_NOTIFY (0x200) fails with EOPNOTSUPP, breaks Chromium AddressTrackerLinux

  google/gvisor#17205 · Filter by author jeffpascoal opened on Nov 7, 2026
  1

• overlay: inconsistent st_dev/st_ino across stat, readdir, copy-up and restore

  type: bug
  google/gvisor#17106 · Filter by author tanyifeng opened on Nov 6, 2026

• Support seccomp user notification (SECCOMP_FILTER_FLAG_NEW_LISTENER / SECCOMP_RET_USER_NOTIF) for in-sandbox supervisors

  type: enhancement
  google/gvisor#17096 · Filter by author milantracy opened on Nov 6, 2026
  

• setsockopt(SOL_UDP, UDP_SEGMENT) succeeds but sendmsg with a UDP_SEGMENT cmsg fails with EINVAL

  google/gvisor#17088 · Filter by author larseggert opened on Nov 6, 2026

• /proc/[pid]/fdinfo/* is readable by another uid (Linux requires ptrace read access)

  google/gvisor#17084 · Filter by author carrollco opened on Nov 6, 2026

• /proc/[pid]/stat starttime and /proc/uptime follow the realtime clock, so a host clock step reorders processes

  google/gvisor#17066 · Filter by author carrollco opened on Nov 5, 2026

• Checkpoint/Restore documentation out of date

  google/gvisor#17056 · Filter by author colesbury opened on Nov 5, 2026
  1

  

• RFC: standard CRIU support for process migration between gVisor and Linux

  google/gvisor#17036 · Filter by author hky1999 opened on Nov 5, 2026
  2

• DinD: preserve networking state across outer sandbox checkpoint/restore

  google/gvisor#17025 · Filter by author hky1999 opened on Nov 5, 2026

• bpf.ParseBytecode panics on empty bytecode

  google/gvisor#17001 · Filter by author jbrown9513 opened on Nov 4, 2026
  1

• open creates or truncates the file, and accept drops the connection, before failing with EMFILE

  type: bug
  google/gvisor#16946 · Filter by author Tonyyang0606 opened on Nov 4, 2026

• boot: nil pointer dereference in RestoreSubcontainer when StartSubcontainer translates start to restore

  type: bug
  google/gvisor#16945 · Filter by author tjq opened on Nov 4, 2026

• netstack: new TCP connections between containers on a bridge inside the sandbox are sporadically reset when the client closed first (Docker in GKE Sandbox)

  type: bug
  google/gvisor#16908 · Filter by author Lorenzofini opened on Nov 3, 2026
  3

• nvproxy: allow importing CUDA memory exported from outside the sandbox

  google/gvisor#16897 · Filter by author ziyangliu-666 opened on Nov 3, 2026

• tcp: processor spins while a non-syscall goroutine holds the endpoint lock

  google/gvisor#16878 · Filter by author martijnhoekstra opened on Nov 2, 2026
  4

• hostinet: blocking recv after shutdown(SHUT_RD) returns EAGAIN instead of 0

  google/gvisor#16792 · Filter by author adios-404 opened on Nov 1, 2026

• runsc/container: StateFile SaveLocked renames without fsync, retains write fd

  google/gvisor#16786 · Filter by author ASHMEET555 opened on Oct 31, 2026
  1

• netstack: TCP close() with SO_LINGER blocks for the full linger time while the peer is open

  google/gvisor#16783 · Filter by author adios-404 opened on Oct 31, 2026

• netstack: a new network namespace's loopback is created UP and addressed (127.0.0.1/8, ::1), unlike Linux; exclusive RTM_NEWADDR then fails (bubblewrap --unshare-net)

  google/gvisor#16779 · Filter by author gustavoignis opened on Oct 31, 2026

• shim: containerd-shim-runsc-v1 stays in CRI-O's cgroup and dies when CRI-O restarts; ShimCgroup is never applied

  google/gvisor#16748 · Filter by author fivetime opened on Oct 30, 2026

• netstack: IPv4 forwarding reads the TTL from released memory after DeepCopyForForwarding

  google/gvisor#16742 · Filter by author cknolla opened on Oct 30, 2026
  5