Issues

• nvproxy: allow importing CUDA memory exported from outside the sandbox

  google/gvisor#16897 · Filter by author ziyangliu-666 opened on Nov 3, 2026

• tcp: processor spins while a non-syscall goroutine holds the endpoint lock

  google/gvisor#16878 · Filter by author martijnhoekstra opened on Nov 2, 2026
  1

• hostinet: blocking recv after shutdown(SHUT_RD) returns EAGAIN instead of 0

  google/gvisor#16792 · Filter by author adios-404 opened on Nov 1, 2026

• runsc/container: StateFile SaveLocked renames without fsync, retains write fd

  google/gvisor#16786 · Filter by author ASHMEET555 opened on Oct 31, 2026
  1

• runsc/cgroup: Uninstall nests per-controller timeouts via defer in loop

  google/gvisor#16785 · Filter by author ASHMEET555 opened on Oct 31, 2026

• netstack: TCP close() with SO_LINGER blocks for the full linger time while the peer is open

  google/gvisor#16783 · Filter by author adios-404 opened on Oct 31, 2026

• netstack: a new network namespace's loopback is created UP and addressed (127.0.0.1/8, ::1), unlike Linux; exclusive RTM_NEWADDR then fails (bubblewrap --unshare-net)

  google/gvisor#16779 · Filter by author gustavoignis opened on Oct 31, 2026

• shim: containerd-shim-runsc-v1 stays in CRI-O's cgroup and dies when CRI-O restarts; ShimCgroup is never applied

  google/gvisor#16748 · Filter by author fivetime opened on Oct 30, 2026

• netstack: IPv4 forwarding reads the TTL from released memory after DeepCopyForForwarding

  google/gvisor#16742 · Filter by author cknolla opened on Oct 30, 2026
  3

• nvproxy: NVIDIA driver 610.57.04 validation report (multi-GPU checkpoint/restore) + two runsc gotchas

  google/gvisor#16724 · Filter by author AlanFokCo opened on Oct 30, 2026
  1

• GPU checkpoint: two-phase sandbox-wide CUDA checkpoint for IPC-interconnected multi-process workloads

  google/gvisor#16723 · Filter by author AlanFokCo opened on Oct 30, 2026
  1

• SO_PEERCRED returns the listener's credentials on AF_UNIX SOCK_SEQPACKET sockets

  type: bug
  google/gvisor#16694 · Filter by author tomrittervg opened on Oct 29, 2026
  1

• runsc: Destroy fails with ENOENT on the rootfs filestore under CRI-O

  google/gvisor#16676 · Filter by author fivetime opened on Oct 29, 2026

• runsc: every CRI-O pod fails since release-20261026.0: "joining UTS namespace ... is not supported"

  google/gvisor#16675 · Filter by author fivetime opened on Oct 29, 2026

• netstack: review order for TCP recovery and performance fixes

  google/gvisor#16670 · Filter by author tamird opened on Oct 29, 2026

• gVisor CNCF onboarding

  google/gvisor#16640 · Filter by author milantracy opened on Oct 28, 2026

• GKE Autopilot 1.37.1 (COS 6.18.48, containerd 2.4.1): node freezes after the efficiency-daemon widens the kubepods cpuset under a busy systrap sandbox

  type: bug
  google/gvisor#16475 · Filter by author ReadAccessBot opened on Oct 27, 2026

• procfs: /proc/sys/fs/aio-max-nr and aio-nr are missing; Redpanda/Seastar aborts at startup

  google/gvisor#16443 · Filter by author bpross opened on Oct 26, 2026

• netstack: close() and shutdown(SHUT_WR) wait out the 200ms TCP_CORK timer instead of flushing

  google/gvisor#16437 · Filter by author graysonguarino opened on Oct 26, 2026

• Very slow Reno recovery after packet loss without TCP timestamps

  type: bug
  google/gvisor#16393 · Filter by author mapelkon opened on Oct 25, 2026
  9

• Rootless directfs: mmap returns ENODEV and utimensat returns EACCES for read-only files

  google/gvisor#16342 · Filter by author olesho opened on Oct 24, 2026

• Optimization: Make pkg/state cheap and fast

  area: performance
  google/gvisor#16216 · Filter by author EtiennePerot opened on Oct 22, 2026 · Lightspeed
  3

  

• Optimization: Read local state files through the async read-ahead reader during restore

  area: performance
  google/gvisor#16209 · Filter by author milantracy opened on Oct 22, 2026 · Lightspeed
  

• signalfd read: short buffers consume the signal, records are 130 bytes, and only one signal is returned per read

  google/gvisor#16192 · Filter by author sotomayorlucas opened on Oct 22, 2026

• FUTEX_LOCK_PI blocks forever when the futex owner does not exist or exits (Linux returns ESRCH or hands off the lock)

  google/gvisor#16184 · Filter by author sotomayorlucas opened on Oct 22, 2026