runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade runcUpgrade buildahUpgrade toolboxUpgrade podman-testsUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade buildah-testsUpgrade podmanUpgrade containernetworking-pluginsUpgrade conmonUpgrade skopeoUpgrade podman-catatonitUpgrade toolbox-testsUpgrade aardvark-dnsUpgrade udicaUpgrade podman-dockerUpgrade netavarkUpgrade criuUpgrade criu-develUpgrade skopeo-testsUpgrade python3-criuUpgrade slirp4netnsUpgrade containers-commonUpgrade criu-libsUpgrade podman-remoteUpgrade podman-pluginsUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade critUpgrade podman-gvproxyUpgrade crunUpgrade container-selinux | Nov 11, 2025 | Nov 7, 2025 |
| Alpine Linux | — | Upgrade runc | Nov 10, 2025 | Nov 6, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade runc-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade runc-debuginfoUpgrade runc-debugsourceUpgrade runc | Nov 7, 2025 | Nov 5, 2025 |
| Arista Eos | — | Upgrade to a fixed EOS release. | Apr 29, 2026 | Apr 7, 2026 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-runc | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade docker-runc | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade criuUpgrade podman-dockerUpgrade conmonUpgrade python3-podmanUpgrade criu-develUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade podman-catatonitUpgrade podman-testsUpgrade slirp4netnsUpgrade crunUpgrade podman-pluginsUpgrade libslirpUpgrade netavarkUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade podman-remoteUpgrade libslirp-develUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade buildahUpgrade python3-criuUpgrade podmanUpgrade fuse-overlayfsUpgrade criu-libsUpgrade runcUpgrade skopeoUpgrade critUpgrade buildah-tests | Nov 11, 2025 | Nov 5, 2025 |
| Redhat Openshift | — | Upgrade runcUpgrade rhcos | Aug 10, 2026 | Nov 5, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 14, 2025 | Nov 5, 2025 |
| Rocky_linux | — | Upgrade criuUpgrade podmanUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-pluginsUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade podman-testsUpgrade podman-catatonitUpgrade podman-remoteUpgrade libslirp-debugsourceUpgrade criu-develUpgrade python3-criuUpgrade podman-debuginfoUpgrade critUpgrade toolbox-testsUpgrade podman-plugins-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade buildahUpgrade buildah-debuginfoUpgrade containers-commonUpgrade conmon-debugsourceUpgrade netavarkUpgrade libslirp-develUpgrade buildah-testsUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade criu-libsUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade toolboxUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade slirp4netnsUpgrade libslirp | Feb 5, 2026 | Nov 28, 2025 |
| Suse | — | Upgrade podmanshUpgrade podman-remoteUpgrade podman-dockerUpgrade runcUpgrade podman | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade runcUpgrade runc-stable | Nov 6, 2025 | Nov 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub