runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade toolboxUpgrade netavarkUpgrade criuUpgrade fuse-overlayfsUpgrade python3-podmanUpgrade podman-dockerUpgrade skopeoUpgrade buildahUpgrade buildah-testsUpgrade toolbox-testsUpgrade udicaUpgrade containernetworking-pluginsUpgrade conmonUpgrade podmanUpgrade runcUpgrade podman-catatonitUpgrade podman-testsUpgrade aardvark-dnsUpgrade cockpit-podmanUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade libslirp-develUpgrade crunUpgrade containers-commonUpgrade slirp4netnsUpgrade skopeo-testsUpgrade criu-develUpgrade podman-remoteUpgrade criu-libsUpgrade podman-pluginsUpgrade container-selinuxUpgrade podman-gvproxyUpgrade crit | Nov 11, 2025 | Nov 7, 2025 |
| Alpine Linux | — | Upgrade runc | Nov 10, 2025 | Nov 6, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runcUpgrade runc-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade runc-debugsourceUpgrade runcUpgrade runc-debuginfo | Nov 7, 2025 | Nov 5, 2025 |
| Arista Eos | — | Upgrade to a fixed EOS release. | Apr 29, 2026 | Apr 7, 2026 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade docker-runc | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade docker-runc | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade docker-runc | Feb 3, 2026 | Jan 13, 2026 |
| Oracle_linux | — | Upgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade libslirp-develUpgrade python3-criuUpgrade skopeoUpgrade critUpgrade runcUpgrade criu-libsUpgrade podmanUpgrade containers-commonUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade buildahUpgrade container-selinuxUpgrade podman-gvproxyUpgrade udicaUpgrade podman-dockerUpgrade slirp4netnsUpgrade python3-podmanUpgrade conmonUpgrade podman-pluginsUpgrade libslirpUpgrade skopeo-testsUpgrade podman-testsUpgrade criuUpgrade crunUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade netavarkUpgrade criu-devel | Nov 11, 2025 | Nov 5, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Nov 5, 2025 |
| Rocky_linux | — | Upgrade buildah-debugsourceUpgrade buildahUpgrade libslirpUpgrade buildah-debuginfoUpgrade slirp4netnsUpgrade conmonUpgrade crun-debuginfoUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade aardvark-dnsUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runc-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfsUpgrade criu-libsUpgrade toolboxUpgrade libslirp-develUpgrade netavarkUpgrade python3-criuUpgrade skopeoUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade critUpgrade podman-remoteUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade criuUpgrade containernetworking-pluginsUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade libslirp-debugsourceUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade podman-gvproxy-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-debugsourceUpgrade runcUpgrade podmanUpgrade podman-plugins-debuginfo | Feb 5, 2026 | Nov 28, 2025 |
| Suse | — | Upgrade podmanshUpgrade podmanUpgrade podman-dockerUpgrade podman-remoteUpgrade runc | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade runcUpgrade runc-stable | Nov 6, 2025 | Nov 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub