Skip to content
OpenAdvisories

Package · Alpine

crun

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-84042

    Crun: crun: rootful krun with passt executes container payload as host root

    A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Ubuntu Alpine
  • High 8.5
    CVE-2025-24965

    .krun_config.json symlink attack creates or overwrites file on the host in crun

    crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are ne…

    containers crun crun crun Ubuntu Alpine