Opencontainers Runc vulnerabilities

• linuxfoundation runc runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations CVE-2026-41579 Fix available 3.3 LowJune 16, 2026
• linuxfoundation runc runc: LSM labels can be bypassed with malicious config using dummy procfs files CVE-2025-52881 Public exploitFix available 7.3 HighNovember 4, 2025
• linuxfoundation runc container escape due to /dev/console mount and related races CVE-2025-52565 Fix available 8.4 HighNovember 4, 2025
• linuxfoundation runc runc container escape via "masked path" abuse due to mount race conditions CVE-2025-31133 Public exploitFix available 7.3 HighNovember 4, 2025
• linuxfoundation runc runc can be confused to create empty files/directories on the host CVE-2024-45310 Fix available 3.6 LowSeptember 3, 2024
• linuxfoundation runc, fedoraproject fedora, red hat ocp-tools-4.15-rhel-8 +26 more +28 more runc container breakout through process.cwd trickery and leaked fds CVE-2024-21626 Public exploitFix available EPSS 18.9% 8.6 HighJanuary 31, 2024
• linuxfoundation runc rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc CVE-2023-25809 Fix available 5.0 MediumMarch 29, 2023
• linuxfoundation runc AppArmor bypass with symlinked /proc in runc CVE-2023-28642 Fix available 6.1 MediumMarch 27, 2023
• linuxfoundation runc, fedoraproject fedora +1 more Incorrect Default Permissions in runc CVE-2022-29162 Fix available 5.9 MediumMay 17, 2022
• debian linux, linuxfoundation runc +1 more Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration CVE-2021-43784 Fix available 6.0 MediumDecember 6, 2021