Description
runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| opencontainers | runc | >=v1.0.0-rc93, < 1.1.12 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | runc | 1.1.12+ds1-1 | — |
| Debian 13 | runc | 1.1.12+ds1-1 | — |
| Debian 12 | runc | 1.1.5+ds1-1+deb12u1 | DSA-5615-1 |
| Debian 11 | runc | 1.0.0~rc93+ds1-5+deb11u3 | DSA-5615-1 |
| Debian 10 | runc | 1.0.0~rc6+dfsg1-3+deb10u3 | DLA-3735-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | runc | 1.1.7-0ubuntu1~22.04.2 | USN-6619-1 |
| Ubuntu 20.04 LTS | runc | 1.1.7-0ubuntu1~20.04.2 | USN-6619-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | runc | 1.1.4-0ubuntu1~18.04.2+esm1 | USN-6619-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | runc | 4:1.1.12-1.el9_3 | RHSA-2024:0670 |
| RHEL 8 | buildah +1 | 1:1.24.6-7.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | cockpit-podman | 46-1.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | conmon | 2:2.1.4-2.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | containers-common | 2:1-38.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | crit +4 | 3.15-3.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | crun | 1.8.7-1.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | netavark +1 | 2:1.0.1-38.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | podman +6 | 2:4.0.2-26.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | python-podman +1 | 4.0.0-2.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | runc | 1:1.1.12-1.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | skopeo +1 | 2:1.6.2-9.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | slirp4netns | 1.1.8-3.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | toolbox +1 | 0.0.99.4-5.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
| RHEL 8 | udica | 0.2.6-4.module+el8.9.0+21242+944321bb | RHSA-2024:0752, RHSA-2024:0748 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Extras Other 7 | docker +7 | 2:1.13.1-210.git7d71120.el7_9 | RHSA-2024:1270 |
| Red Hat Rhel Extras Other 7 | runc | 1.0.0-70.rc10.el7_9 | RHSA-2024:0717 |
| RHEL 9.2 EUS | runc | 4:1.1.12-1.el9_2 | RHSA-2024:0755 |
| RHEL 9.0 EUS | runc | 4:1.1.12-1.el9_0 | RHSA-2024:0756 |
| RHEL 8.8 EUS | aardvark-dns | 2:1.5.0-2.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | buildah +1 | 1:1.29.2-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | cockpit-podman | 63.1-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | conmon | 3:2.1.6-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | container-selinux | 2:2.205.0-2.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | containernetworking-plugins | 1:1.2.0-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | containers-common | 2:1-64.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | crit +4 | 3.15-4.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | crun | 1.8.4-2.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | fuse-overlayfs | 1.11-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | libslirp +1 | 4.4.0-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | netavark | 2:1.5.1-3.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | oci-seccomp-bpf-hook | 1.2.8-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | podman +6 | 3:4.4.1-17.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | python-podman +1 | 4.4.1-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | runc | 1:1.1.12-1.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | skopeo +1 | 2:1.11.2-0.2.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | slirp4netns | 1.2.0-2.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | toolbox +1 | 0.0.99.3-7.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.8 EUS | udica | 0.2.6-20.module+el8.8.0+21265+93802b02 | RHSA-2024:0759 |
| RHEL 8.6 EUS | buildah +1 | 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | cockpit-podman | 43-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | conmon | 2:2.1.0-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | container-selinux | 2:2.178.0-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | containernetworking-plugins | 1.0.1-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | containers-common | 2:1-28.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | crit +4 | 3.15-3.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | crun | 1.4.4-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | fuse-overlayfs | 1.8.2-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | libslirp +1 | 4.4.0-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | netavark +1 | 2:1.0.1-28.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | oci-seccomp-bpf-hook | 1.2.3-3.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | podman +6 | 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | python-podman +1 | 4.0.0-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | runc | 1:1.1.12-1.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | skopeo +1 | 2:1.6.1-2.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | slirp4netns | 1.1.8-2.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | toolbox +1 | 0.0.99.3-0.4.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.6 EUS | udica | 0.2.6-3.module+el8.6.0+21254+7ef668f8 | RHSA-2024:0764, RHSA-2024:0757 |
| RHEL 8.4 TUS | buildah +1 | 1.19.9-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | cockpit-podman | 29-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | conmon | 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | container-selinux | 2:2.167.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | containernetworking-plugins | 0.9.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | crit +2 | 3.15-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | crun | 0.18-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | fuse-overlayfs | 1.4.0-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | libslirp +1 | 4.3.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | oci-seccomp-bpf-hook | 1.2.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | podman +5 | 3.0.1-13.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | runc | 1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | RHSA-2024:0760 |
| RHEL 8.4 TUS | skopeo +2 | 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | slirp4netns | 1.1.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | toolbox | 0.0.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 TUS | udica | 0.2.4-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | buildah +1 | 1.19.9-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | cockpit-podman | 29-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | conmon | 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | container-selinux | 2:2.167.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | containernetworking-plugins | 0.9.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | crit +2 | 3.15-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | crun | 0.18-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | fuse-overlayfs | 1.4.0-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | libslirp +1 | 4.3.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | oci-seccomp-bpf-hook | 1.2.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | podman +5 | 3.0.1-13.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | runc | 1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | RHSA-2024:0760 |
| RHEL 8.4 E4S | skopeo +2 | 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | slirp4netns | 1.1.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | toolbox | 0.0.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 E4S | udica | 0.2.4-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | buildah +1 | 1.19.9-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | cockpit-podman | 29-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | conmon | 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | container-selinux | 2:2.167.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | containernetworking-plugins | 0.9.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | crit +2 | 3.15-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | crun | 0.18-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | fuse-overlayfs | 1.4.0-2.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | libslirp +1 | 4.3.1-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | oci-seccomp-bpf-hook | 1.2.0-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | podman +5 | 3.0.1-13.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | runc | 1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | RHSA-2024:0760 |
| RHEL 8.4 AUS | skopeo +2 | 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | slirp4netns | 1.1.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | toolbox | 0.0.8-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.4 AUS | udica | 0.2.4-1.module+el8.4.0+21078+a96cfbf6 | RHSA-2024:0760 |
| RHEL 8.2 TUS | buildah +1 | 1.11.6-8.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | cockpit-podman | 11-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | conmon | 2:2.0.6-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | container-selinux | 2:2.124.0-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | containernetworking-plugins | 0.8.3-4.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | crit +2 | 3.12-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | fuse-overlayfs | 0.7.2-5.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | podman +3 | 1.6.4-24.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | runc | 1.0.0-66.rc10.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | skopeo +2 | 1:0.1.40-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | slirp4netns | 0.4.2-3.git21fdece.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | toolbox | 0.0.7-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 TUS | udica | 0.2.1-2.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | buildah +1 | 1.11.6-8.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | cockpit-podman | 11-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | conmon | 2:2.0.6-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | container-selinux | 2:2.124.0-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | containernetworking-plugins | 0.8.3-4.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | crit +2 | 3.12-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | fuse-overlayfs | 0.7.2-5.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | podman +3 | 1.6.4-24.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | runc | 1.0.0-66.rc10.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | skopeo +2 | 1:0.1.40-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | slirp4netns | 0.4.2-3.git21fdece.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | toolbox | 0.0.7-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 E4S | udica | 0.2.1-2.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | buildah +1 | 1.11.6-8.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | cockpit-podman | 11-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | conmon | 2:2.0.6-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | container-selinux | 2:2.124.0-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | containernetworking-plugins | 0.8.3-4.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | crit +2 | 3.12-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | fuse-overlayfs | 0.7.2-5.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | podman +3 | 1.6.4-24.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | python-podman-api | 1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | runc | 1.0.0-66.rc10.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | skopeo +2 | 1:0.1.40-9.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | slirp4netns | 0.4.2-3.git21fdece.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | toolbox | 0.0.7-1.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| RHEL 8.2 AUS | udica | 0.2.1-2.module+el8.2.0+21264+96602818 | RHSA-2024:0758 |
| Red Hat OpenShift 4 | microshift +4 | 4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | RHSA-2024:10841, RHSA-2024:10525, RHSA-2024:10520 |
| Red Hat OpenShift 4 | microshift-gateway-api +1 | 4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | RHEA-2024:6124 |
| Red Hat OpenShift 4 | microshift-low-latency | 4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | RHSA-2024:10520, RHEA-2024:6124 |
| Red Hat OpenShift 4 | microshift-multus +1 | 4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | RHSA-2024:10520, RHSA-2024:10149, RHEA-2024:6124 |
| Red Hat OpenShift 4 | microshift-olm +1 | 4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9 | RHSA-2024:10841, RHSA-2024:10520, RHSA-2024:10149 |
| Red Hat OpenShift 4 | runc | 3:1.1.2-3.1.rhaos4.11.el8 | RHSA-2024:0684, RHSA-2024:0666, RHSA-2024:0662 |
| Red Hat Ocp Tools 4 | jenkins | 2.440.3.1718879390-3.el8 | RHSA-2024:4597 |
| Red Hat Ocp Tools 4 | jenkins-2-plugins | 4.15.1718879538-1.el8 | RHSA-2024:4597 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | runc | 4:1.1.12-1.el9_3 | ALSA-2024:0670 |
| AlmaLinux 8 | buildah +1 | 1:1.24.6-7.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | cockpit-podman | 46-1.module_el8.7.0+3344+5bcd850f | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | conmon | 2:2.1.4-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | container-selinux | 2:2.205.0-3.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | containernetworking-plugins | 1:1.1.1-6.module_el8.9.0+3711+04fcca5e | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | containers-common | 2:1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | crit +4 | 3.15-3.module_el8.6.0+2877+8e437bf5 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | crun | 1.8.7-1.module_el8.9.0+3643+9234dc3b | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | fuse-overlayfs | 1.9-2.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | libslirp +1 | 4.4.0-1.module_el8.6.0+2877+8e437bf5 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | netavark +1 | 2:1.0.1-38.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module_el8.8.0+3468+16b86c82 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | podman +6 | 2:4.0.2-26.module_el8.9.0+3722+7fd8ab2b.alma.1 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | python3-podman | 4.0.0-2.module_el8.9.0+3711+04fcca5e | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | runc | 1:1.1.12-1.module_el8.9.0+3717+81096349 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | skopeo +1 | 2:1.6.2-9.module_el8.9.0+3687+dcd7ef8f.alma.1 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | slirp4netns | 1.1.8-3.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | toolbox +1 | 0.0.99.4-5.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
| AlmaLinux 8 | udica | 0.2.6-4.module_el8.9.0+3627+db8ec155 | ALSA-2024:0752, ALSA-2024:0748 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | buildah | 1:1.24.6-7.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | cockpit-podman | 46-1.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | conmon | 2:2.1.4-2.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | containers-common | 2:1-38.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | criu | 3.15-3.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | libslirp | 4.4.0-1.module+el8.9.0+1445+07728297 | RLSA-2024:0752, RLSA-2024:0748 |
| Rocky Linux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | python-podman | 4.0.0-2.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | runc | 1:1.1.12-1.module+el8.10.0+1815+5fe7415e | RLSA-2024:0752, RLSA-2024:0748 |
| Rocky Linux 8 | skopeo | 2:1.6.2-9.module+el8.9.0+1578+aa900b44 | RLSA-2024:0748 |
| Rocky Linux 8 | slirp4netns | 1.1.8-3.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
| Rocky Linux 8 | udica | 0.2.6-4.module+el8.9.0+1445+07728297 | RLSA-2024:0748 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES 15 SP4 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES 15 SP3 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES 15 SP2 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES 15 SP1 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0295-1 |
Show 16 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 | runc | 1.1.11-16.43.1 | SUSE-SU-2024:0328-1, SUSE-SU-2024:0294-1 |
| SLES for SAP 15 SP4 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES for SAP 15 SP3 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES for SAP 15 SP2 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLES for SAP 15 SP1 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0295-1 |
| SLE Micro 5.5 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE Micro 5.4 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE Micro 5.3 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE Micro 5.2 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE Micro 5.1 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE HPC 15 SP4 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE HPC 15 SP3 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE HPC 15 SP2 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| SLE HPC 15 SP1 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0295-1 |
| SUSE Package Hub 15 SP6 | crun | 1.20-bp156.2.3.1 | openSUSE-SU-2025:0074-1 |
| SUSE Enterprise Storage 7.1 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | crun | 1.14.4-1.1 | openSUSE-SU-2024:13754-1 |
| openSUSE Tumbleweed | runc | 1.1.12-1.1 | openSUSE-SU-2024:13644-1 |
| openSUSE Tumbleweed | singularity-ce | 4.1.3-1.1 | openSUSE-SU-2024:14059-1 |
| openSUSE Leap 15.6 | crun | 1.20-bp156.2.3.1 | openSUSE-SU-2025:0074-1 |
| openSUSE Leap 15.5 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.4 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
| openSUSE Leap Micro 5.3 | runc | 1.1.11-150000.58.1 | SUSE-SU-2024:0459-1, SUSE-SU-2024:0295-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | runc | 1.1.12-r0 | — |
| Alpine v3.23 | runc | 1.1.12-r0 | — |
| Alpine v3.22 | runc | 1.1.12-r0 | — |
| Alpine v3.21 | runc | 1.1.12-r0 | — |
| Alpine v3.20 | runc | 1.1.12-r0 | — |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | runc | 1.1.12-r0 | — |
| Alpine v3.18 | runc | 1.1.12-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | runc | 1.1.11-1.amzn2023.0.1 | ALAS2023-2024-501 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | buildah | 1.41.4-2 | — |
| Azure Linux 3 | cri-tools +1 | 1.30.1-1 | — |
| Azure Linux 3 | kubevirt | 1.2.0-1 | — |
| Azure Linux 3 | moby-engine | 25.0.3-1 | — |
| Azure Linux 3 | podman | 5.6.1-2 | — |
| Azure Linux 2 (CBL-Mariner) | cri-o | 1.21.7-3 | — |
| Azure Linux 2 (CBL-Mariner) | cri-tools | 1.28.0-5 | — |
| Azure Linux 2 (CBL-Mariner) | kubernetes | 1.28.4-3 | — |
| Azure Linux 2 (CBL-Mariner) | kubevirt | 0.59.0-14 | — |
| Azure Linux 2 (CBL-Mariner) | moby-runc | 1.1.9-4 | — |
| Azure Linux 2 (CBL-Mariner) | podman +1 | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | runc | 4:1.1.12-1.el9_3 | ELSA-2024-0670 |
| Oracle Linux 8 | buildah +1 | 1:1.24.6-7.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | cockpit-podman | 46-1.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | conmon | 2:2.1.4-2.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | container-selinux | 2:2.205.0-3.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | containernetworking-plugins | 1:1.1.1-6.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | containers-common | 2:1-38.0.1.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | crit +4 | 3.15-3.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | crun | 1.8.7-1.module+el8.9.0+90147+a4870853 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | fuse-overlayfs | 1.9-2.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | libslirp +1 | 4.4.0-1.module+el8.9.0+90147+a4870853 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | netavark +1 | 2:1.0.1-38.0.1.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | oci-seccomp-bpf-hook | 1.2.5-2.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | podman +6 | 2:4.0.2-25.0.1.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | python3-podman | 4.0.0-2.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | runc | 1:1.1.12-1.module+el8.9.0+90147+a4870853 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | skopeo +1 | 2:1.6.2-9.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | slirp4netns | 1.1.8-3.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 8 | udica | 0.2.6-4.module+el8.9.0+90148+6046e3c3 | ELSA-2024-0752, ELSA-2024-0748 |
| Oracle Linux 7 | runc | 3:1.1.12-1.el7 | ELSA-2024-17931, ELSA-2024-12148 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | buildkitd | 0.12.5-r1 | — |
| Wolfi rolling | cadvisor | 0.48.1-r4 | — |
| Wolfi rolling | ctop | 0.7.7-r13 | — |
| Wolfi rolling | docker-dind | 25.0.2-r0 | — |
| Wolfi rolling | grype | 0.74.4-r1 | — |
| Wolfi rolling | k3d +2 | 5.6.0-r6 | — |
| Wolfi rolling | k3s +2 | 1.29.0-r1 | — |
| Wolfi rolling | k9s | 0.31.8-r0 | — |
| Wolfi rolling | kaniko +3 | 1.20.1-r0 | — |
| Wolfi rolling | kots +2 | 1.107.0-r1 | — |
| Wolfi rolling | kubectl-1.25 +8 | No fix yet | — |
| Wolfi rolling | kubectl-1.28 +2 | 1.28.9-r0 | — |
| Wolfi rolling | kubectl-1.29 +2 | 1.29.3-r1 | — |
| Wolfi rolling | kubescape | 3.0.3-r7 | — |
| Wolfi rolling | nerdctl | 1.7.3-r0 | — |
| Wolfi rolling | newrelic-infrastructure-agent | 1.48.4-r1 | — |
| Wolfi rolling | podman +1 | 5.2.2-r1 | — |
| Wolfi rolling | runc | 1.1.12-r0 | — |
| Wolfi rolling | skaffold | 2.11.0-r0 | — |
| Wolfi rolling | skopeo | 1.14.2-r1 | — |
| Wolfi rolling | syft | 0.104.0-r0 | — |
| Wolfi rolling | trivy | 0.49.0-r0 | — |
| Wolfi rolling | wolfictl | 0.14.13-r0 | — |
| Wolfi rolling | zarf | 0.32.3-r0 | — |
| Wolfi rolling | zot | 2.0.1-r2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
runc (docker) File Descriptor Leak Privilege Escalation
exploit/linux/local/runc_cwd_priv_esc
GitHub 21 repositories · most starred shown
-
NitroCao/CVE-2024-21626 ★ 80 · Feb 1, 2024
PoC and Detection for CVE-2024-21626
-
V0WKeep3r/CVE-2024-21626-runcPOC ★ 6 · Feb 5, 2024
-
cdxiaodong/CVE-2024-21626 ★ 5 · Feb 2, 2024
CVE-2024-21626-poc-research-Reappearance-andtodo
-
zhangguanzhang/CVE-2024-21626 ★ 4 · Feb 2, 2024
-
laysakura/CVE-2024-21626-demo ★ 3 · Feb 2, 2024
Container Runtime Meetup #5 のLT用のデモ
-
scherepiuk/container-escape-ebpf ★ 2 · Dec 31, 2025
POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133
-
dorser/cve-2024-21626 ★ 2 · Apr 10, 2024
-
KubernetesBachelor/CVE-2024-21626 ★ 2 · Apr 3, 2024
POC
-
Sk3pper/CVE-2024-21626 ★ 2 · Mar 15, 2024
-
zpxlz/CVE-2024-21626-POC ★ 1 · Feb 1, 2024
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/opencontainers/runc | >= 1.0.0-rc93, < 1.1.12 | 1.1.12 | GHSA-xr7r-f8xq-vfvv |
Advisories 50
- ALSA-2024:0670 Important: runc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0752 Important: container-tools:rhel8 security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2024:0748 Important: container-tools:4.0 security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2024:4597 Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2024:0748 Red Hat Security Advisory: container-tools:4.0 security update Red Hat Security Advisories (RHSA) · Oct 18, 2026
- RHEA-2024:6124 Red Hat Enhancement Advisory: Red Hat build of MicroShift 4.18.1 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:1270 Red Hat Security Advisory: docker security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:10841 Red Hat Security Advisory: OpenShift Container Platform 4.15.41 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:10525 Red Hat Security Advisory: Red Hat build of MicroShift 4.14.42 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:10520 Red Hat Security Advisory: OpenShift Container Platform 4.17.7 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:10149 Red Hat Security Advisory: Red Hat build of MicroShift 4.16.24 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0764 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0759 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0760 Red Hat Security Advisory: container-tools:3.0 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0758 Red Hat Security Advisory: container-tools:2.0 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0755 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0756 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0757 Red Hat Security Advisory: container-tools:4.0 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0752 Red Hat Security Advisory: container-tools:rhel8 security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0684 Red Hat Security Advisory: OpenShift Container Platform 4.11.58 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0717 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0666 Red Hat Security Advisory: OpenShift Container Platform 4.12.49 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0670 Red Hat Security Advisory: runc security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0662 Red Hat Security Advisory: OpenShift Container Platform 4.13.32 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2024:0645 Red Hat Security Advisory: OpenShift Container Platform 4.14.11 packages and security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- WID-SEC-2024-0794 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- USN-6619-1 runc vulnerability Ubuntu Security Notices (USN) · Jun 29, 2026
- DSA-5615-1 runc - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3735-1 runc - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2024:0295-1 Security update for runc SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0459-1 Security update for runc SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0328-1 Security update for runc SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14059-1 singularity-ce-4.1.3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13754-1 crun-1.14.4-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:0074-1 Security update for crun SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:0294-1 Security update for runc SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2024-3377 Dell PowerProtect Data Domain: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- WID-SEC-2024-0272 docker: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2025
- RLSA-2024:0752 Important: container-tools:rhel8 security update Rocky Linux Security Advisories · Oct 9, 2025
- WID-SEC-2024-0869 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 10, 2025
- VDE-2024-016 ADS-TEC Industrial IT: Docker vulnerability affects multiple products CERT@VDE · May 22, 2025
- RLSA-2024:0748 Important: container-tools:4.0 security update Rocky Linux Security Advisories · May 7, 2025
- openSUSE-SU-2024:13644-1 runc-1.1.12-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2024-1488 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 30, 2024
- ELSA-2024-0752 Important: container-tools:ol8 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 14, 2024
- ELSA-2024-0748 Important: container-tools:4.0 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Feb 14, 2024
- ELSA-2024-12148 Important: runc security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Feb 9, 2024
- ELSA-2024-17931 Important: runc security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Feb 9, 2024
- ELSA-2024-0670 Important: runc security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Feb 5, 2024
- ALAS2023-2024-501 Important: runc security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 1, 2024
References
- https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv
- https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf
- https://github.com/opencontainers/runc/releases/tag/v1.1.12
- http://www.openwall.com/lists/oss-security/2024/02/01/1
- http://www.openwall.com/lists/oss-security/2024/02/02/3
- http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYMO3BANINS6RGFQFKPRG4FIOJ7GWYTL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NLXNE23Q5ESQUAI22Z7A63JX2WMPJ2J/
- https://lists.debian.org/debian-lts-announce/2024/02/msg00005.html