runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-dockerUpgrade runcUpgrade podmanUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-catatonitUpgrade podman-testsUpgrade conmonUpgrade buildah-testsUpgrade aardvark-dnsUpgrade toolboxUpgrade udicaUpgrade python3-podmanUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade netavarkUpgrade criuUpgrade toolbox-testsUpgrade skopeoUpgrade critUpgrade slirp4netnsUpgrade skopeo-testsUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade podman-pluginsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade crunUpgrade libslirp-develUpgrade python3-criuUpgrade podman-remoteUpgrade criu-libsUpgrade criu-devel | Nov 11, 2025 | Nov 7, 2025 |
| Alpine Linux | — | Upgrade runc | Nov 10, 2025 | Nov 6, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade runc-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade runc-debugsourceUpgrade runcUpgrade runc-debuginfo | Nov 7, 2025 | Nov 5, 2025 |
| Arista Eos | — | Upgrade to a fixed EOS release. | Apr 29, 2026 | Apr 7, 2026 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-runc | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade docker-runc | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade crunUpgrade podman-testsUpgrade skopeo-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade podman-catatonitUpgrade netavarkUpgrade podman-pluginsUpgrade slirp4netnsUpgrade criu-develUpgrade libslirpUpgrade conmonUpgrade podman-gvproxyUpgrade udicaUpgrade python3-podmanUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade aardvark-dnsUpgrade python3-criuUpgrade podmanUpgrade fuse-overlayfsUpgrade criu-libsUpgrade buildahUpgrade podman-remoteUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade critUpgrade buildah-testsUpgrade skopeoUpgrade libslirp-devel | Nov 11, 2025 | Nov 5, 2025 |
| Redhat Openshift | — | Upgrade runcUpgrade rhcos | Aug 10, 2026 | Nov 5, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Nov 14, 2025 | Nov 5, 2025 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade critUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade runcUpgrade libslirp-debugsourceUpgrade conmon-debuginfoUpgrade podman-testsUpgrade podmanUpgrade containernetworking-plugins-debuginfoUpgrade crunUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade libslirp-develUpgrade containers-commonUpgrade conmon-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade netavarkUpgrade criu-debuginfoUpgrade buildah-testsUpgrade podman-gvproxyUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade libslirpUpgrade crun-debuginfoUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfsUpgrade criu-libsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-debugsourceUpgrade podman-remoteUpgrade skopeo-testsUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade toolbox-debugsourceUpgrade slirp4netns-debuginfoUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade podman-gvproxy-debuginfo | Feb 5, 2026 | Nov 28, 2025 |
| Suse | — | Upgrade podmanshUpgrade runcUpgrade podmanUpgrade podman-dockerUpgrade podman-remote | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade runc-stableUpgrade runc | Nov 6, 2025 | Nov 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub