Skip to content
OpenAdvisories
High WID-SEC-2025-2563 18 CVEs

Microsoft Azure Linux: Mehrere Schwachstellen

Published Nov 11, 2025 · Updated May 11, 2026 · Revision 4 · de-DE

Vendor: Dell Vendor: Fedora Vendor: Microsoft Vendor: SUSE Product: Azure Linux Product: ECS Product: Linux Product: Linux Product: Windows Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Microsoft Azure Linux und Microsoft Windows ausnutzen um erhöhte Privilegien zu erlangen, beliebigen Code auszuführen, die Authentifizierung zu umgehen, Spoofing-Angriffe durchzuführen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.

Product

Microsoft Azure Linux ist eine von Microsoft entwickelte Linux-Distribution, die für die Ausführung von Workloads in der Azure-Cloud optimiert ist.
Windows ist ein Betriebssystem von Microsoft.

Vulnerabilities 18

  • High 8.8
    CVE-2025-62220

    Windows Subsystem for Linux GUI Remote Code Execution Vulnerability

    Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Subsystem for Linux GUI Linux Windows
  • High 8.4
    CVE-2025-52565

    container escape due to /dev/console mount and related races

    runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/cons…

    opencontainers runc k3s-static-1.32 falco-no-driver Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.3
    CVE-2024-25621

    containerd affected by a local privilege escalation via wide permissions on CRI directory

    containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containe…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • High 7.3
    CVE-2025-31133 Public exploit

    runc container escape via "masked path" abuse due to mount race conditions

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount…

    opencontainers runc k3s-static-1.32 falco-no-driver Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.3
    CVE-2025-52881 Public exploit

    runc: LSM labels can be bypassed with malicious config using dummy procfs files

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…

    opencontainers runc zot kubescape Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.9
    CVE-2025-64329

    containerd CRI server: Host memory exhaustion through Attach goroutine leak

    containerd is an open-source container runtime. Versions 1.7.28 and below, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1 contain a bug in the CRI Attach implementation where a user can exhaust memory on the host d…

    containerd containerd zot kubescape Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.9
    CVE-2025-64436

    KubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes

    KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the ability to update VMI and patch nodes, could be abused to force a VMI migration to an attacker-contr…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 6.5
    CVE-2025-64433

    KubeVirt Arbitrary Container File Read

    KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary files from the virt-launcher pod's file system. This issue stems from improper symlink handling when mo…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 5.5
    CVE-2025-60753

    An issue was discovered in libarchive bsdtar before version 3.8.1 in function apply_substitution in file tar/subst.c wh…

    libarchive libarchive libarchive Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2025-12875

    mruby array.c ary_fill_exec out-of-bounds write

    A weakness has been identified in mruby 3.4.0. This vulnerability affects the function ary_fill_exec of the file mrbgems/mruby-array-ext/src/array.c. Executing a manipulation of the argument start/length can lead to out-of-bounds write. The attack needs to be…

    mruby Ubuntu
  • Medium 5.3
    CVE-2025-64435

    KubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation

    KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.7.0-beta.0, a logic flaw in the virt-controller allows an attacker to disrupt the control over a running VMI by creating a pod with the same labels as the legitimate virt-launcher pod …

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 5.0
    CVE-2025-64437

    KubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes

    KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler does not verify whether the launcher-sock is a symlink or a regular file. This oversight can be exploited, for example, to change the ownershi…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 4.7
    CVE-2025-64432

    KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer

    KubeVirt is a virtual machine management add-on for Kubernetes. Versions 1.5.3 and below, and 1.6.0 contained a flawed implementation of the Kubernetes aggregation layer's authentication flow which could enable bypass of RBAC controls. It was discovered that …

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 4.7
    CVE-2025-64434

    KubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing

    KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, due to the peer verification logic in virt-handler (via verifyPeerCert), an attacker who compromises a virt-handler instance, could exploit these shared credentials to i…

    KubeVirt kubevirt docker-machine-driver-harvester kubevirt Azure Linux Wolfi Go
  • Medium 4.3
    CVE-2025-10966

    missing SFTP host verification with wolfSSH

    curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

    curl curl curl curl Debian Azure Linux Alpine
  • Unscored —
    CVE-2025-12863 Rejected

    This CVE was assigned for a libxml2 issue#1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2…

  • Unscored —
    CVE-2025-40107

    can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled

    In the Linux kernel, the following vulnerability has been resolved: can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled This issue is similar to the vulnerability in the `mcp251x` driver, which was fixed in commit 0…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-40109

    crypto: rng - Ensure set_ent is always present

    In the Linux kernel, the following vulnerability has been resolved: crypto: rng - Ensure set_ent is always present Ensure that set_ent is always set since only drbg provides it.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

Revision history

  1. #4

    Neue Updates von Dell aufgenommen

  2. #3

    Neue Updates von Fedora aufgenommen

  3. #2

    Neue Updates von SUSE aufgenommen

  4. #1

    Initiale Fassung

References