Skip to content
OpenAdvisories
High RLSA-2024:0752 1 CVE

Important: container-tools:rhel8 security update

Published Feb 12, 2024 · Updated Oct 9, 2025

Ecosystem: Rocky Linux

Summary

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

* runc: file descriptor leak (CVE-2024-21626)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 3

ReleasePackageFixed in
Rocky Linux · 8 libslirp 0:4.4.0-1.module+el8.9.0+1445+07728297
Rocky Linux · 8 runc 1:1.1.12-1.module+el8.10.0+1815+5fe7415e
Rocky Linux · 8 runc 1:1.1.12-1.module+el8.10.0+1825+623b0c20

Vulnerabilities 1

  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2258725