A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade podman-pluginsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade aardvark-dnsUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-testsUpgrade containers-commonUpgrade conmonUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade netavarkUpgrade libslirpUpgrade container-selinuxUpgrade criu-libsUpgrade toolboxUpgrade critUpgrade runcUpgrade fuse-overlayfsUpgrade criuUpgrade podman-remoteUpgrade podman-catatonitUpgrade udicaUpgrade podman-dockerUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade skopeoUpgrade podmanUpgrade buildahUpgrade toolbox-testsUpgrade crun | Apr 30, 2024 | Mar 18, 2024 |
| Alpine Linux | — | Upgrade podmanUpgrade buildah | Aug 22, 2024 | Mar 18, 2024 |
| Debian | — | Upgrade golang-github-containers-buildah | May 15, 2025 | Mar 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade app-containers/podman.Upgrade app-containers/buildah. | Jul 9, 2024 | Mar 18, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade buildah-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade podman-catatonitUpgrade python3-podmanUpgrade podman-testsUpgrade runcUpgrade conmonUpgrade python3-criuUpgrade cockpit-podmanUpgrade podman-dockerUpgrade buildahUpgrade critUpgrade slirp4netnsUpgrade fuse-overlayfsUpgrade podman-gvproxyUpgrade udicaUpgrade netavarkUpgrade criuUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podmanUpgrade libslirp-develUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade crunUpgrade podman-pluginsUpgrade criu-libsUpgrade criu-develUpgrade containers-commonUpgrade container-selinux | Apr 25, 2024 | Mar 18, 2024 |
| Redhat Openshift | — | Upgrade podman | May 9, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirp-debuginfoUpgrade toolboxUpgrade toolbox-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfsUpgrade runcUpgrade criu-libs-debuginfoNo solution existsUpgrade buildah-testsUpgrade containernetworking-pluginsUpgrade netavarkUpgrade conmon-debugsourceUpgrade podmanUpgrade containernetworking-plugins-debugsourceUpgrade podman-dockerUpgrade critUpgrade udicaUpgrade criuUpgrade criu-debuginfoUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-testsUpgrade buildahUpgrade aardvark-dnsUpgrade skopeoUpgrade podman-gvproxy-debuginfoUpgrade buildah-debuginfoUpgrade crunUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-podmanUpgrade criu-libsUpgrade toolbox-debuginfoUpgrade criu-debugsourceUpgrade containers-commonUpgrade podman-gvproxyUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade python3-criuUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade container-selinuxUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade criu-develUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade containernetworking-plugins-debuginfoUpgrade skopeo-testsUpgrade runc-debugsourceUpgrade libslirp-debugsourceUpgrade slirp4netns-debugsourceUpgrade crun-debuginfoUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade libslirp-develUpgrade libslirpUpgrade fuse-overlayfs-debugsource | Apr 29, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade buildah-debuginfoUpgrade netavarkUpgrade buildahUpgrade podman-remoteUpgrade podman-catatonitUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade toolbox-debugsourceUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade toolbox-testsUpgrade conmon-debugsourceUpgrade criuUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade podman-plugins-debuginfoUpgrade crun-debugsourceUpgrade crunUpgrade toolbox-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade conmonUpgrade toolboxUpgrade skopeoUpgrade python3-criuUpgrade podman-testsUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade containers-commonUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade runcUpgrade podman-catatonit-debuginfoUpgrade criu-libsUpgrade critUpgrade libslirp-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade libslirp | May 8, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade podman-cni-configUpgrade cni-pluginsUpgrade docker-zsh-completionUpgrade cniUpgrade docker-fish-completionUpgrade podman-remoteUpgrade docker-bash-completionUpgrade docker-rootless-extrasUpgrade dockerUpgrade buildahUpgrade podman-dockerUpgrade podmanshUpgrade podman | Apr 1, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub