Red Hat Enterprise Linux (crun): Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten

Summary

Product

Vulnerabilities 1

• High 7.8
  CVE-2026-84042

  Crun: crun: rootful krun with passt executes container payload as host root

  A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Ubuntu Alpine
  Sep 10, 2026

Revision history

1. 2026-11-11 #2

   Neue Updates von Red Hat aufgenommen

2. 2026-11-10 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:97561 vom 2026-11-10
  https://access.redhat.com/errata/RHSA-2026:97561
• Red Hat Security Advisory RHSA-2026:98561 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98561