A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade crunUpgrade critUpgrade toolbox-testsUpgrade podmanUpgrade criuUpgrade runcUpgrade podman-dockerUpgrade toolboxUpgrade buildah-testsUpgrade python3-criuUpgrade udicaUpgrade buildahUpgrade podman-catatonitUpgrade skopeoUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade python3-podmanUpgrade criu-libsUpgrade netavarkUpgrade podman-testsUpgrade libslirpUpgrade container-selinuxUpgrade aardvark-dnsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-gvproxyUpgrade conmonUpgrade skopeo-testsUpgrade libslirp-develUpgrade podman-pluginsUpgrade cockpit-podman | Apr 30, 2024 | Mar 18, 2024 |
| Alpine Linux | — | Upgrade buildahUpgrade podman | Aug 22, 2024 | Mar 18, 2024 |
| Debian | — | Upgrade golang-github-containers-buildahNo solution exists | May 15, 2025 | Mar 18, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade app-containers/buildah.Upgrade app-containers/podman. | Jul 9, 2024 | Mar 18, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 8, 2024 |
| Oracle_linux | — | Upgrade buildahUpgrade critUpgrade netavarkUpgrade runcUpgrade podman-catatonitUpgrade criuUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade libslirpUpgrade podman-testsUpgrade slirp4netnsUpgrade udicaUpgrade python3-podmanUpgrade conmonUpgrade buildah-testsUpgrade python3-criuUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade libslirp-develUpgrade podmanUpgrade crunUpgrade podman-pluginsUpgrade criu-develUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade podman-remoteUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade criu-libsUpgrade skopeo | Apr 25, 2024 | Mar 18, 2024 |
| Redhat Openshift | — | Upgrade podman | May 9, 2024 | Mar 18, 2024 |
| Redhat_linux | — | Upgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade buildahUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade conmon-debugsourceUpgrade fuse-overlayfsUpgrade critUpgrade podman-dockerUpgrade toolboxUpgrade skopeoUpgrade criuUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade udicaUpgrade podman-catatonit-debuginfoUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debuginfoNo solution existsUpgrade netavarkUpgrade toolbox-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade fuse-overlayfs-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade python3-podmanUpgrade criu-libsUpgrade conmonUpgrade crun-debuginfoUpgrade cockpit-podmanUpgrade runc-debuginfoUpgrade toolbox-debuginfoUpgrade libslirpUpgrade crun-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade crunUpgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade containers-commonUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade container-selinux | Apr 29, 2024 | Mar 18, 2024 |
| Rocky_linux | — | Upgrade skopeo-testsUpgrade libslirp-debugsourceUpgrade runcUpgrade critUpgrade podman-debugsourceUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade libslirp-develUpgrade conmonUpgrade podman-plugins-debuginfoUpgrade toolboxUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade crunUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade criu-libsUpgrade podmanUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade crun-debuginfoUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade netavarkUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade skopeo-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netnsUpgrade podman-remoteUpgrade podman-gvproxyUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade criuUpgrade criu-debuginfoUpgrade conmon-debugsourceUpgrade runc-debugsourceUpgrade skopeo-debuginfo | May 8, 2024 | Mar 18, 2024 |
| Suse | — | Upgrade cniUpgrade docker-zsh-completionUpgrade podman-cni-configUpgrade cni-pluginsUpgrade docker-fish-completionUpgrade dockerUpgrade docker-rootless-extrasUpgrade buildahUpgrade podman-remoteUpgrade docker-bash-completionUpgrade podmanshUpgrade podmanUpgrade podman-docker | Apr 1, 2024 | Mar 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Mar 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub