A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade buildahUpgrade skopeoUpgrade podman-remoteUpgrade buildah-testsUpgrade udicaUpgrade fuse-overlayfsUpgrade criuUpgrade runcUpgrade toolbox-testsUpgrade toolboxUpgrade critUpgrade podmanUpgrade podman-dockerUpgrade podman-catatonitUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade crunUpgrade criu-develUpgrade libslirpUpgrade criu-libsUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade podman-testsUpgrade skopeo-testsUpgrade libslirp-develUpgrade python3-podmanUpgrade podman-pluginsUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade netavarkUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade container-selinuxUpgrade containers-common | Apr 30, 2024 | Mar 18, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 22, 2024 | Mar 18, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Mar 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 18, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade crunUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade criu-develUpgrade containers-commonUpgrade libslirp-develUpgrade podmanUpgrade skopeo-testsUpgrade skopeoUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonitUpgrade netavarkUpgrade runcUpgrade buildah-testsUpgrade buildahUpgrade critUpgrade slirp4netnsUpgrade libslirpUpgrade criuUpgrade udicaUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade podman-dockerUpgrade cockpit-podmanUpgrade python3-podmanUpgrade podman-testsUpgrade conmonUpgrade python3-criuUpgrade aardvark-dns | Apr 25, 2024 | Mar 18, 2024 |
| Redhat Openshift | — | Upgrade podman | May 9, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade criu-develUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crunUpgrade podman-debugsourceUpgrade python3-criuUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade libslirp-debugsourceUpgrade crun-debugsourceUpgrade skopeo-testsUpgrade libslirp-develUpgrade conmonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins-debuginfoUpgrade libslirpUpgrade criu-debugsourceUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-remote-debuginfoUpgrade containers-commonUpgrade podman-pluginsUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-podmanUpgrade netavarkUpgrade podman-debuginfoUpgrade podman-remoteUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade podman-catatonitUpgrade criuUpgrade udicaUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-testsUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcNo solution existsUpgrade podmanUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debugsourceUpgrade critUpgrade buildahUpgrade aardvark-dnsUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade podman-docker | Apr 29, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade critUpgrade libslirp-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade runcUpgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debuginfoUpgrade containers-commonUpgrade crun-debuginfoUpgrade libslirpUpgrade podman-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade conmonUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade toolboxUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-testsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade crun-debugsourceUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade slirp4netns-debuginfoUpgrade podman-gvproxyUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade slirp4netnsUpgrade podman-remoteUpgrade buildahUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade conmon-debuginfoUpgrade runc-debugsourceUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podman-debuginfoUpgrade buildah-debuginfoUpgrade netavarkUpgrade podman-catatonitUpgrade toolbox-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade criu | May 8, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade cni-pluginsUpgrade cniUpgrade docker-zsh-completionUpgrade docker-fish-completionUpgrade podman-cni-configUpgrade buildahUpgrade docker-rootless-extrasUpgrade podmanUpgrade podmanshUpgrade docker-bash-completionUpgrade podman-dockerUpgrade podman-remoteUpgrade docker | Apr 1, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub