runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containers-commonUpgrade python3-criuUpgrade skopeoUpgrade libslirp-develUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade conmonUpgrade container-selinuxUpgrade toolboxUpgrade cockpit-podmanUpgrade python-podman-apiUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade libslirpUpgrade criuUpgrade critUpgrade udica | May 4, 2022 | May 27, 2021 |
| Alpine Linux | — | Upgrade k3sUpgrade runc | Aug 22, 2024 | May 27, 2021 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | Jul 4, 2022 | May 27, 2021 |
| Amazon_linux | — | Upgrade runc | May 20, 2021 | May 14, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 27, 2021 |
| Centos_linux | — | Upgrade crun-debuginfoUpgrade criuUpgrade criu-debuginfoUpgrade docker-clientUpgrade oci-seccomp-bpf-hookUpgrade docker-commonUpgrade docker-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade dockerUpgrade docker-logrotateUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debugsourceUpgrade cockpit-podmanUpgrade containers-commonUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade docker-novolume-pluginUpgrade libslirp-develUpgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade python-podman-apiUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade docker-rhel-push-pluginUpgrade buildah-debugsourceUpgrade skopeo-debuginfoUpgrade docker-lvm-pluginUpgrade podman-testsUpgrade podman-pluginsUpgrade crunUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade container-selinuxUpgrade libslirpUpgrade toolboxUpgrade podman-remoteUpgrade podman-dockerUpgrade containernetworking-plugins-debuginfoUpgrade podman-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade skopeoUpgrade critUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade udicaUpgrade docker-v1.10-migratorUpgrade conmonUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade runcUpgrade podman-remote-debuginfo | Jun 1, 2021 | May 27, 2021 |
| Debian | — | Upgrade runc | Mar 29, 2023 | May 27, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/runc. | Jul 12, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-engine | Jul 18, 2023 | May 27, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade docker-engine | Aug 10, 2021 | May 27, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade docker-engine-selinuxUpgrade docker-engine | Sep 29, 2021 | May 27, 2021 |
| Oracle_linux | — | Upgrade skopeoUpgrade container-selinuxUpgrade containers-commonUpgrade skopeo-testsUpgrade crunUpgrade critUpgrade libslirp-develUpgrade conmonUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade podmanUpgrade python3-criuUpgrade docker-engineUpgrade libslirpUpgrade buildahUpgrade buildah-testsUpgrade docker-cliUpgrade fuse-overlayfsUpgrade criuUpgrade podman-catatonitUpgrade runcUpgrade cockpit-podmanUpgrade podman-testsUpgrade python-podman-apiUpgrade podman-dockerUpgrade udicaUpgrade slirp4netns | Jun 11, 2021 | May 19, 2021 |
| Redhat Openshift | — | Upgrade python-kubernetesUpgrade python-oslo-dbUpgrade python-oslo-configUpgrade python-oslo-concurrencyUpgrade python-ironic-prometheus-exporterUpgrade podmanUpgrade python-openstacksdkUpgrade python-oslo-logUpgrade openvswitch2.15Upgrade ovn2.13Upgrade python-oslo-serviceUpgrade kata-containersUpgrade jenkins-2-pluginsUpgrade openstack-ironic-inspectorUpgrade python-oslo-policyUpgrade python-oslo-upgradecheckUpgrade python-openshiftUpgrade jenkinsUpgrade openshift-ansibleUpgrade ironic-images-ipa-x86_64Upgrade ironic-images-ipa-ppc64leUpgrade atomic-openshift-service-idlerUpgrade openshift-kuryrUpgrade ironic-imagesUpgrade python-oslo-i18nUpgrade runcUpgrade openstack-ironicUpgrade python-keystoneauth1Upgrade openshift-clientsUpgrade python-ironic-libUpgrade rust-afterburnUpgrade rteval-loadsUpgrade python-stevedoreUpgrade python-pyrsistentUpgrade ostreeUpgrade python-debtcollectorUpgrade haproxyUpgrade openshiftUpgrade console-login-helper-messagesUpgrade python-oslo-contextUpgrade python-jsonschemaUpgrade cri-oUpgrade python-eventletUpgrade toolboxUpgrade cri-toolsUpgrade butaneUpgrade python-hardwareUpgrade redhat-release-coreosUpgrade python-toozUpgrade python-oslo-utilsUpgrade python-sushy-oem-idracUpgrade openstack-ironic-python-agentUpgrade python-oslo-serializationUpgrade coreos-installerUpgrade ignitionUpgrade python-sushy | May 25, 2021 | May 19, 2021 |
| Redhat_linux | — | Upgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade fuse-overlayfs-debugsourceUpgrade python-podman-apiUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade skopeo-testsUpgrade conmonUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade containers-commonUpgrade podman-debuginfoUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade crunUpgrade runcUpgrade podman-dockerUpgrade skopeoUpgrade fuse-overlayfsUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade slirp4netns-debugsourceUpgrade criuUpgrade buildahUpgrade containernetworking-plugins-debuginfoNo solution existsUpgrade critUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade skopeo-debugsourceUpgrade container-selinuxUpgrade python3-criuUpgrade podmanUpgrade buildah-testsUpgrade udicaUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsource | Jun 1, 2021 | May 27, 2021 |
| Rocky_linux | — | Upgrade podman-pluginsUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade slirp4netnsUpgrade podman-catatonit-debuginfoUpgrade skopeo-debuginfoUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade libslirpUpgrade skopeo-testsUpgrade crunUpgrade buildah-testsUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debuginfoUpgrade conmon-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-debuginfoUpgrade python3-criuUpgrade buildahUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade runc-debuginfoUpgrade skopeoUpgrade slirp4netns-debuginfoUpgrade podmanUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade critUpgrade containernetworking-pluginsUpgrade runcUpgrade podman-remoteUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade crun-debugsourceUpgrade criuUpgrade podman-catatonit | May 5, 2022 | May 27, 2021 |
| Suse | — | Upgrade docker-kubic-bash-completionUpgrade runcUpgrade docker-fish-completionUpgrade docker-kubic-zsh-completionUpgrade containerd-ctrUpgrade docker-kubic-kubeadm-criconfigUpgrade dockerUpgrade docker-zsh-completionUpgrade containerdUpgrade docker-kubicUpgrade docker-bash-completionUpgrade docker-kubic-fish-completion | Jun 12, 2021 | May 14, 2021 |
| Ubuntu | — | Upgrade runc (Ubuntu Pro)Upgrade runc | May 20, 2021 | May 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 27, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub