runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-gvproxyUpgrade critUpgrade crunUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade python3-criuUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-testsUpgrade container-selinuxUpgrade podman-pluginsUpgrade podman-remoteUpgrade criu-develUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade buildah-testsUpgrade podman-dockerUpgrade conmonUpgrade criuUpgrade udicaUpgrade skopeoUpgrade toolbox-testsUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade toolboxUpgrade podmanUpgrade netavarkUpgrade buildahUpgrade aardvark-dnsUpgrade python3-podmanUpgrade podman-testsUpgrade runc | Nov 11, 2025 | Nov 7, 2025 |
| Alpine Linux | — | Upgrade runc | Nov 10, 2025 | Nov 6, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runc-debuginfoUpgrade runc | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade runc-debuginfoUpgrade runc-debugsourceUpgrade runc | Nov 7, 2025 | Nov 5, 2025 |
| Arista Eos | — | Upgrade to a fixed EOS release. | Apr 29, 2026 | Apr 7, 2026 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-runc | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade docker-runc | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade podmanUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade python3-criuUpgrade critUpgrade buildah-testsUpgrade skopeoUpgrade runcUpgrade libslirp-develUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade buildahUpgrade podman-remoteUpgrade podman-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade python3-podmanUpgrade udicaUpgrade criu-develUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade criuUpgrade crunUpgrade podman-pluginsUpgrade libslirpUpgrade netavarkUpgrade conmon | Nov 11, 2025 | Nov 5, 2025 |
| Redhat Openshift | — | Upgrade rhcosUpgrade runc | Aug 10, 2026 | Nov 5, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Nov 5, 2025 |
| Rocky_linux | — | Upgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade runc-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade runc-debuginfoUpgrade aardvark-dnsUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade netavarkUpgrade conmon-debugsourceUpgrade libslirp-develUpgrade podman-debugsourceUpgrade toolbox-testsUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade skopeoUpgrade crunUpgrade containernetworking-pluginsUpgrade criuUpgrade podmanUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade runcUpgrade podman-plugins-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-remoteUpgrade libslirp-debuginfo | Feb 5, 2026 | Nov 28, 2025 |
| Suse | — | Upgrade runcUpgrade podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade podmansh | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade runcUpgrade runc-stable | Nov 6, 2025 | Nov 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub