Skip to content
OpenAdvisories
High DSA-5615-1 1 CVE

runc - security update

Published Feb 4, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 runc 1.0.0~rc93+ds1-5+deb11u3
Debian · 12 runc 1.1.5+ds1-1+deb12u1

Vulnerabilities 1

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go