Linuxfoundation Runc vulnerabilities

• linuxfoundation runc runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations CVE-2026-41579 Fix available 3.3 LowJune 16, 2026
• linuxfoundation runc runc: LSM labels can be bypassed with malicious config using dummy procfs files CVE-2025-52881 Public exploitFix available 7.3 HighNovember 4, 2025
• linuxfoundation runc container escape due to /dev/console mount and related races CVE-2025-52565 Fix available 8.4 HighNovember 4, 2025
• linuxfoundation runc runc container escape via "masked path" abuse due to mount race conditions CVE-2025-31133 Public exploitFix available 7.3 HighNovember 4, 2025
• linuxfoundation runc runc can be confused to create empty files/directories on the host CVE-2024-45310 Fix available 3.6 LowSeptember 3, 2024
• linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 more runc container breakout through process.cwd trickery and leaked fds CVE-2024-21626 Public exploitFix available EPSS 18.9% 8.6 HighJanuary 31, 2024
• linuxfoundation runc rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc CVE-2023-25809 Fix available 5.0 MediumMarch 29, 2023
• linuxfoundation runc AppArmor bypass with symlinked /proc in runc CVE-2023-28642 Fix available 6.1 MediumMarch 27, 2023
• debian linux, linuxfoundation runc, redhat enterprise linux +1 more +3 more Opencontainers runc Incorrect Authorization vulnerability CVE-2023-27561 Fix available 7.0 HighMarch 3, 2023
• linuxfoundation runc, fedoraproject fedora +1 more Incorrect Default Permissions in runc CVE-2022-29162 Fix available 5.9 MediumMay 17, 2022
• debian linux, moby, fedoraproject fedora +1 more +3 more Default inheritable capabilities for linux container should be empty CVE-2022-24769 Fix available 5.9 MediumMarch 24, 2022
• debian linux, linuxfoundation runc +1 more Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration CVE-2021-43784 Fix available 6.0 MediumDecember 6, 2021
• linuxfoundation runc, fedoraproject fedora +1 more mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs CVE-2021-30465 Fix available EPSS 10.2% 8.5 HighMay 19, 2021
• debian linux, linuxfoundation runc, canonical ubuntu linux +2 more +4 more opencontainers runc contains procfs race condition with a shared volume mount CVE-2019-19921 Fix available 7.0 HighFebruary 7, 2020
• docker, linuxfoundation runc, canonical ubuntu linux +7 more +9 more Incorrect Authorization in runc CVE-2019-16884 Fix available 7.5 HighSeptember 25, 2019
• docker, linuxfoundation runc, apache mesos +15 more +17 more runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to... CVE-2019-5736 Public exploitFix available EPSS 98.5% 8.6 HighFebruary 11, 2019
• docker, linuxfoundation runc, opensuse +2 more Privilege Elevation in runc CVE-2016-3697 Fix available 7.8 HighApril 26, 2016