CVE-2024-21626: runc container breakout through process.cwd trickery and leaked fds

Modified

AliasesSUSE-SU-2024:0294-1SUSE-SU-2024:0295-1SUSE-SU-2024:0328-1+156 more

Published 31-01-2024Last modified 17-09-2026

Vulnerability summary

CVE-2024-21626 is a high (CVSS 8.6) vulnerability in fedoraproject fedora. EPSS estimates a 18.92% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (Metasploit, 31-01-2024)

Source freshness unavailable

How is this decided?

CVSS score

8.6/10

010

High · v3.1 (CVE.org)

EPSS score

18.92%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3github, reference, metasploit

Timeline

31-01-2024
PublishedVulnerability first disclosed.
17-09-2026
Last modifiedVulnerability information updated.

Description

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue.

CVSS metrics

9 scores · 9 sources · 1 version

v3.18.6

EPSS trend

Probability

18.92%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 18.92% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

3 found

githubUnverified
Runc
Maturity: poc
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
MetasploitremoteVerified
runc (docker) File Descriptor Leak Privilege Escalation
exploit/linux/local/runc_cwd_priv_esc
Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat80 products

aardvark-dns< 2:1.7.0-1.module+el8.9.0+21243+a586538b | < 2:1.0.1-28.module+el8.6.0+21254+7ef668f8 | < 2:1.5.0-2.module+el8.8.0+21265+93802b02 | < 2:1.0.1-40.module+el8.6.0+21266+3e24c7b3
buildah< 1:1.31.3-3.module+el8.9.0+21243+a586538b | < 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | < 0:1.11.6-8.module+el8.2.0+21264+96602818 | < 1:1.29.2-1.module+el8.8.0+21265+93802b02 | < 0:1.19.9-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3
buildah-debuginfo< 1:1.31.3-3.module+el8.9.0+21243+a586538b | < 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | < 0:1.11.6-8.module+el8.2.0+21264+96602818 | < 1:1.29.2-1.module+el8.8.0+21265+93802b02 | < 0:1.19.9-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3
buildah-debugsource< 1:1.31.3-3.module+el8.9.0+21243+a586538b | < 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | < 0:1.11.6-8.module+el8.2.0+21264+96602818 | < 1:1.29.2-1.module+el8.8.0+21265+93802b02 | < 0:1.19.9-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3
buildah-tests< 1:1.31.3-3.module+el8.9.0+21243+a586538b | < 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | < 0:1.11.6-8.module+el8.2.0+21264+96602818 | < 1:1.29.2-1.module+el8.8.0+21265+93802b02 | < 0:1.19.9-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3

buildah-tests-debuginfo< 1:1.31.3-3.module+el8.9.0+21243+a586538b | < 1:1.24.2-3.module+el8.6.0+21254+7ef668f8 | < 0:1.11.6-8.module+el8.2.0+21264+96602818 | < 1:1.29.2-1.module+el8.8.0+21265+93802b02 | < 0:1.19.9-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.26.2-1.module+el8.6.0+21266+3e24c7b3
cockpit-podman< 0:75-1.module+el8.9.0+21243+a586538b | < 0:43-1.module+el8.6.0+21254+7ef668f8 | < 0:11-1.module+el8.2.0+21264+96602818 | < 0:63.1-1.module+el8.8.0+21265+93802b02 | < 0:29-2.module+el8.4.0+21078+a96cfbf6 | < 0:49.1-1.module+el8.6.0+21266+3e24c7b3
conmon< 3:2.1.8-1.module+el8.9.0+21243+a586538b | < 2:2.1.0-1.module+el8.6.0+21254+7ef668f8 | < 2:2.0.6-1.module+el8.2.0+21264+96602818 | < 3:2.1.6-1.module+el8.8.0+21265+93802b02 | < 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | < 2:2.1.4-1.module+el8.6.0+21266+3e24c7b3
conmon-debuginfo< 3:2.1.8-1.module+el8.9.0+21243+a586538b | < 2:2.1.0-1.module+el8.6.0+21254+7ef668f8 | < 3:2.1.6-1.module+el8.8.0+21265+93802b02 | < 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | < 2:2.1.4-1.module+el8.6.0+21266+3e24c7b3
conmon-debugsource< 3:2.1.8-1.module+el8.9.0+21243+a586538b | < 2:2.1.0-1.module+el8.6.0+21254+7ef668f8 | < 3:2.1.6-1.module+el8.8.0+21265+93802b02 | < 2:2.0.26-1.module+el8.4.0+21078+a96cfbf6 | < 2:2.1.4-1.module+el8.6.0+21266+3e24c7b3
container-selinux< 2:2.221.0-1.module+el8.9.0+21243+a586538b | < 2:2.178.0-1.module+el8.6.0+21254+7ef668f8 | < 2:2.124.0-1.module+el8.2.0+21264+96602818 | < 2:2.205.0-2.module+el8.8.0+21265+93802b02 | < 2:2.167.0-1.module+el8.4.0+21078+a96cfbf6 | < 2:2.189.0-1.module+el8.6.0+21266+3e24c7b3
containernetworking-plugins< 1:1.3.0-8.module+el8.9.0+21243+a586538b | < 0:1.0.1-1.module+el8.6.0+21254+7ef668f8 | < 0:0.8.3-4.module+el8.2.0+21264+96602818 | < 1:1.2.0-1.module+el8.8.0+21265+93802b02 | < 0:0.9.1-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.1.1-4.module+el8.6.0+21266+3e24c7b3
containernetworking-plugins-debuginfo< 1:1.3.0-8.module+el8.9.0+21243+a586538b | < 0:1.0.1-1.module+el8.6.0+21254+7ef668f8 | < 0:0.8.3-4.module+el8.2.0+21264+96602818 | < 1:1.2.0-1.module+el8.8.0+21265+93802b02 | < 0:0.9.1-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.1.1-4.module+el8.6.0+21266+3e24c7b3
containernetworking-plugins-debugsource< 1:1.3.0-8.module+el8.9.0+21243+a586538b | < 0:1.0.1-1.module+el8.6.0+21254+7ef668f8 | < 0:0.8.3-4.module+el8.2.0+21264+96602818 | < 1:1.2.0-1.module+el8.8.0+21265+93802b02 | < 0:0.9.1-1.module+el8.4.0+21078+a96cfbf6 | < 1:1.1.1-4.module+el8.6.0+21266+3e24c7b3
containers-common< 2:1-71.module+el8.9.0+21243+a586538b | < 2:1-28.module+el8.6.0+21254+7ef668f8 | < 1:0.1.40-9.module+el8.2.0+21264+96602818 | < 2:1-64.module+el8.8.0+21265+93802b02 | < 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | < 2:1-40.module+el8.6.0+21266+3e24c7b3
crit< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.12-9.module+el8.2.0+21264+96602818 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-1.module+el8.4.0+21078+a96cfbf6 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.12-9.module+el8.2.0+21264+96602818 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-1.module+el8.4.0+21078+a96cfbf6 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu-debuginfo< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.12-9.module+el8.2.0+21264+96602818 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-1.module+el8.4.0+21078+a96cfbf6 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu-debugsource< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.12-9.module+el8.2.0+21264+96602818 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-1.module+el8.4.0+21078+a96cfbf6 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu-devel< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu-libs< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
criu-libs-debuginfo< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
crun< 0:1.8.7-1.module+el8.9.0+21243+a586538b | < 0:1.4.4-1.module+el8.6.0+21254+7ef668f8 | < 0:1.8.4-2.module+el8.8.0+21265+93802b02 | < 0:0.18-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.5-1.module+el8.6.0+21266+3e24c7b3
crun-debuginfo< 0:1.8.7-1.module+el8.9.0+21243+a586538b | < 0:1.4.4-1.module+el8.6.0+21254+7ef668f8 | < 0:1.8.4-2.module+el8.8.0+21265+93802b02 | < 0:0.18-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.5-1.module+el8.6.0+21266+3e24c7b3
crun-debugsource< 0:1.8.7-1.module+el8.9.0+21243+a586538b | < 0:1.4.4-1.module+el8.6.0+21254+7ef668f8 | < 0:1.8.4-2.module+el8.8.0+21265+93802b02 | < 0:0.18-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.5-1.module+el8.6.0+21266+3e24c7b3
docker< 2:1.13.1-210.git7d71120.el7_9
docker-client< 2:1.13.1-210.git7d71120.el7_9
docker-common< 2:1.13.1-210.git7d71120.el7_9
docker-debuginfo< 2:1.13.1-210.git7d71120.el7_9
docker-logrotate< 2:1.13.1-210.git7d71120.el7_9
docker-lvm-plugin< 2:1.13.1-210.git7d71120.el7_9
docker-novolume-plugin< 2:1.13.1-210.git7d71120.el7_9
docker-rhel-push-plugin< 2:1.13.1-210.git7d71120.el7_9
docker-v1.10-migrator< 2:1.13.1-210.git7d71120.el7_9
fuse-overlayfs< 0:1.12-1.module+el8.9.0+21243+a586538b | < 0:1.8.2-1.module+el8.6.0+21254+7ef668f8 | < 0:0.7.2-5.module+el8.2.0+21264+96602818 | < 0:1.11-1.module+el8.8.0+21265+93802b02 | < 0:1.4.0-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.9-1.module+el8.6.0+21266+3e24c7b3
fuse-overlayfs-debuginfo< 0:1.12-1.module+el8.9.0+21243+a586538b | < 0:1.8.2-1.module+el8.6.0+21254+7ef668f8 | < 0:0.7.2-5.module+el8.2.0+21264+96602818 | < 0:1.11-1.module+el8.8.0+21265+93802b02 | < 0:1.4.0-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.9-1.module+el8.6.0+21266+3e24c7b3
fuse-overlayfs-debugsource< 0:1.12-1.module+el8.9.0+21243+a586538b | < 0:1.8.2-1.module+el8.6.0+21254+7ef668f8 | < 0:0.7.2-5.module+el8.2.0+21264+96602818 | < 0:1.11-1.module+el8.8.0+21265+93802b02 | < 0:1.4.0-2.module+el8.4.0+21078+a96cfbf6 | < 0:1.9-1.module+el8.6.0+21266+3e24c7b3
libslirp< 0:4.4.0-1.module+el8.9.0+21243+a586538b | < 0:4.4.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.0-1.module+el8.8.0+21265+93802b02 | < 0:4.3.1-1.module+el8.4.0+21078+a96cfbf6 | < 0:4.4.0-1.module+el8.6.0+21266+3e24c7b3
libslirp-debuginfo< 0:4.4.0-1.module+el8.9.0+21243+a586538b | < 0:4.4.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.0-1.module+el8.8.0+21265+93802b02 | < 0:4.3.1-1.module+el8.4.0+21078+a96cfbf6 | < 0:4.4.0-1.module+el8.6.0+21266+3e24c7b3
libslirp-debugsource< 0:4.4.0-1.module+el8.9.0+21243+a586538b | < 0:4.4.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.0-1.module+el8.8.0+21265+93802b02 | < 0:4.3.1-1.module+el8.4.0+21078+a96cfbf6 | < 0:4.4.0-1.module+el8.6.0+21266+3e24c7b3
libslirp-devel< 0:4.4.0-1.module+el8.9.0+21243+a586538b | < 0:4.4.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.0-1.module+el8.8.0+21265+93802b02 | < 0:4.3.1-1.module+el8.4.0+21078+a96cfbf6 | < 0:4.4.0-1.module+el8.6.0+21266+3e24c7b3
microshift< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-gateway-api< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9
microshift-gateway-api-release-info< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9
microshift-greenboot< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-low-latency< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
microshift-multus< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
microshift-multus-release-info< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9
microshift-networking< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-olm< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-olm-release-info< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-release-info< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
microshift-selinux< 0:4.18.1-202502201910.p0.g84f67ec.assembly.4.18.1.el9 | < 0:4.16.24-202411220522.p0.gcc4fedc.assembly.4.16.24.el9 | < 0:4.17.7-202411280904.p0.g129334d.assembly.4.17.7.el9 | < 0:4.14.42-202411280904.p0.gcf4d04f.assembly.4.14.42.el9 | < 0:4.15.41-202412091343.p0.gcf9680e.assembly.4.15.41.el9
netavark< 2:1.7.0-2.module+el8.9.0+21243+a586538b | < 2:1.0.1-28.module+el8.6.0+21254+7ef668f8 | < 2:1.5.1-3.module+el8.8.0+21265+93802b02 | < 2:1.0.1-40.module+el8.6.0+21266+3e24c7b3
oci-seccomp-bpf-hook< 0:1.2.9-1.module+el8.9.0+21243+a586538b | < 0:1.2.3-3.module+el8.6.0+21254+7ef668f8 | < 0:1.2.8-1.module+el8.8.0+21265+93802b02 | < 0:1.2.0-1.module+el8.4.0+21078+a96cfbf6 | < 0:1.2.6-1.module+el8.6.0+21266+3e24c7b3
oci-seccomp-bpf-hook-debuginfo< 0:1.2.9-1.module+el8.9.0+21243+a586538b | < 0:1.2.3-3.module+el8.6.0+21254+7ef668f8 | < 0:1.2.8-1.module+el8.8.0+21265+93802b02 | < 0:1.2.0-1.module+el8.4.0+21078+a96cfbf6 | < 0:1.2.6-1.module+el8.6.0+21266+3e24c7b3
oci-seccomp-bpf-hook-debugsource< 0:1.2.9-1.module+el8.9.0+21243+a586538b | < 0:1.2.3-3.module+el8.6.0+21254+7ef668f8 | < 0:1.2.8-1.module+el8.8.0+21265+93802b02 | < 0:1.2.0-1.module+el8.4.0+21078+a96cfbf6 | < 0:1.2.6-1.module+el8.6.0+21266+3e24c7b3
podman< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-catatonit< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-catatonit-debuginfo< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-debuginfo< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-debugsource< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-docker< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-gvproxy< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-gvproxy-debuginfo< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-plugins< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-plugins-debuginfo< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-remote< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-remote-debuginfo< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
podman-tests< 3:4.6.1-8.module+el8.9.0+21243+a586538b | < 2:4.0.2-6.module+el8.6.0+21254+7ef668f8 | < 0:1.6.4-24.module+el8.2.0+21264+96602818 | < 3:4.4.1-17.module+el8.8.0+21265+93802b02 | < 0:3.0.1-13.module+el8.4.0+21078+a96cfbf6 | < 2:4.2.0-1.module+el8.6.0+21266+3e24c7b3
python-podman< 0:4.6.0-2.module+el8.9.0+21243+a586538b | < 0:4.0.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.1-1.module+el8.8.0+21265+93802b02 | < 0:4.0.1-1.module+el8.6.0+21266+3e24c7b3
python-podman-api< 0:1.2.0-0.2.gitd0a45fe.module+el8.2.0+21264+96602818
python3-criu< 0:3.18-4.module+el8.9.0+21243+a586538b | < 0:3.15-3.module+el8.6.0+21254+7ef668f8 | < 0:3.12-9.module+el8.2.0+21264+96602818 | < 0:3.15-4.module+el8.8.0+21265+93802b02 | < 0:3.15-1.module+el8.4.0+21078+a96cfbf6 | < 0:3.15-3.module+el8.6.0+21266+3e24c7b3
python3-podman< 0:4.6.0-2.module+el8.9.0+21243+a586538b | < 0:4.0.0-1.module+el8.6.0+21254+7ef668f8 | < 0:4.4.1-1.module+el8.8.0+21265+93802b02 | < 0:4.0.1-1.module+el8.6.0+21266+3e24c7b3
runc< 4:1.1.12-1.rhaos4.14.el8 | < 4:1.1.12-1.rhaos4.14.el9 | < 4:1.1.12-1.rhaos4.13.el8 | < 4:1.1.12-1.rhaos4.13.el9 | < 3:1.1.6-5.1.rhaos4.12.el8 | < 4:1.1.12-1.el9_3 | < 3:1.1.2-3.1.rhaos4.11.el8 | < 0:1.0.0-70.rc10.el7_9 | < 1:1.1.12-1.module+el8.9.0+21243+a586538b | < 4:1.1.12-1.el9_2 | < 4:1.1.12-1.el9_0 | < 1:1.1.12-1.module+el8.6.0+21254+7ef668f8 | < 0:1.0.0-66.rc10.module+el8.2.0+21264+96602818 | < 1:1.1.12-1.module+el8.8.0+21265+93802b02 | < 0:1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | < 1:1.1.12-1.module+el8.6.0+21266+3e24c7b3
runc-debuginfo< 4:1.1.12-1.rhaos4.14.el8 | < 4:1.1.12-1.rhaos4.14.el9 | < 4:1.1.12-1.rhaos4.13.el8 | < 4:1.1.12-1.rhaos4.13.el9 | < 3:1.1.6-5.1.rhaos4.12.el8 | < 4:1.1.12-1.el9_3 | < 3:1.1.2-3.1.rhaos4.11.el8 | < 0:1.0.0-70.rc10.el7_9 | < 1:1.1.12-1.module+el8.9.0+21243+a586538b | < 4:1.1.12-1.el9_2 | < 4:1.1.12-1.el9_0 | < 1:1.1.12-1.module+el8.6.0+21254+7ef668f8 | < 0:1.0.0-66.rc10.module+el8.2.0+21264+96602818 | < 1:1.1.12-1.module+el8.8.0+21265+93802b02 | < 0:1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | < 1:1.1.12-1.module+el8.6.0+21266+3e24c7b3
runc-debugsource< 4:1.1.12-1.rhaos4.14.el8 | < 4:1.1.12-1.rhaos4.14.el9 | < 4:1.1.12-1.rhaos4.13.el8 | < 4:1.1.12-1.rhaos4.13.el9 | < 3:1.1.6-5.1.rhaos4.12.el8 | < 4:1.1.12-1.el9_3 | < 3:1.1.2-3.1.rhaos4.11.el8 | < 1:1.1.12-1.module+el8.9.0+21243+a586538b | < 4:1.1.12-1.el9_2 | < 4:1.1.12-1.el9_0 | < 1:1.1.12-1.module+el8.6.0+21254+7ef668f8 | < 0:1.0.0-66.rc10.module+el8.2.0+21264+96602818 | < 1:1.1.12-1.module+el8.8.0+21265+93802b02 | < 0:1.0.0-78.rc95.module+el8.4.0+21268+737b4855 | < 1:1.1.12-1.module+el8.6.0+21266+3e24c7b3
skopeo< 2:1.13.3-3.module+el8.9.0+21243+a586538b | < 2:1.6.1-2.module+el8.6.0+21254+7ef668f8 | < 1:0.1.40-9.module+el8.2.0+21264+96602818 | < 2:1.11.2-0.2.module+el8.8.0+21265+93802b02 | < 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | < 2:1.9.1-1.module+el8.6.0+21266+3e24c7b3
skopeo-debuginfo< 2:1.6.1-2.module+el8.6.0+21254+7ef668f8 | < 1:0.1.40-9.module+el8.2.0+21264+96602818 | < 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | < 2:1.9.1-1.module+el8.6.0+21266+3e24c7b3
skopeo-debugsource< 2:1.6.1-2.module+el8.6.0+21254+7ef668f8 | < 1:0.1.40-9.module+el8.2.0+21264+96602818 | < 1:1.2.2-8.module+el8.4.0+21078+a96cfbf6 | < 2:1.9.1-1.module+el8.6.0+21266+3e24c7b3

Show all 80

Chainguard54 products

buildkitd< 0.12.5-r1
cadvisor< 0.48.1-r4
ctop< 0.7.7-r13
docker< 25.0.2-r0
docker-config-mirror-gcr< 25.0.2-r0

Show all 54

Wolfi54 products

buildkitd< 0.12.5-r1
cadvisor< 0.48.1-r4
ctop< 0.7.7-r13
docker< 25.0.2-r0
docker-config-mirror-gcr< 25.0.2-r0

Show all 54

Opensuse5 products

crun&distro=openSUSE Tumbleweed< 1.14.4-1.1
runc&distro=openSUSE Leap 15.5< 1.1.11-150000.58.1 | < 1.1.12-150000.61.2
runc&distro=openSUSE Leap Micro 5.3< 1.1.11-150000.58.1 | < 1.1.12-150000.61.2
runc&distro=openSUSE Leap Micro 5.4< 1.1.11-150000.58.1 | < 1.1.12-150000.61.2
runc&distro=openSUSE Tumbleweed< 1.1.12-1.1

Alpine1 product

runc< 1.1.12-r0

Debian1 product

runc< 1.0.0~rc93+ds1-5+deb11u3 | < 1.1.5+ds1-1+deb12u1 | < 1.1.12+ds1-1

Fedoraproject1 product

fedoraEOL39

Github.com/opencontainers1 product

runc≥ 1.0.0-rc93, < 1.1.12

Linuxfoundation1 product

runc< 1.1.12

Opencontainers1 product

runc≥ v1.0.0-rc93, < 1.1.12

Ubuntu1 product

runc< 1.1.4-0ubuntu1~18.04.2+esm1 | < 1.1.7-0ubuntu1~20.04.2 | < 1.1.7-0ubuntu1~22.04.2

11 vendors · 200 products · Showing 200 of 231

References

89 links

github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvvX Refsource CONFIRMARTICLEREPORTAdvisoryWEBExploitVendor Advisory
github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecfX Refsource MISCFIXWEBPatch
github.com/opencontainers/runc/releases/tag/v1.1.12X Refsource MISCWEBRelease Notes
www.openwall.com/lists/oss-security/2024/02/01/1WEBMailing List
www.openwall.com/lists/oss-security/2024/02/02/3WEBMailing List
packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.htmlWEBExploitThird Party AdvisoryVDB Entry
lists.fedoraproject.org/archives/…WEBMailing List
lists.fedoraproject.org/archives/…WEB
lists.debian.org/debian-lts-announce/2024/02/msg00005.htmlWEB
www.vicarius.io/vsociety/posts/leaky-vessels-part-1-cve-2024-21626WEB

Show all 89 references

access.redhat.com/security/cve/CVE-2024-21626VDB EntryX Refsource REDHATREPORTAdvisoryWEB
bugzilla.redhat.com/show_bug.cgi?id=2258725Issue TrackingX Refsource REDHATREPORTWEB
security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21626.jsonX Sadp Csaf VexWEB
access.redhat.com/errata/RHSA-2024:1270Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0717Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:4597Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0684Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2441Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0666Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2701Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0662Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:2710Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0645Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:1711Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:10525Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:10841Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:10149Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:0650Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:10520Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2025:0115Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0758Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0760Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0757Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0764Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0759Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0748Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0752Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0756Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0755Vendor AdvisoryX Refsource REDHATAdvisoryWEB
access.redhat.com/errata/RHSA-2024:0670Vendor AdvisoryX Refsource REDHATAdvisoryWEB
www.suse.com/support/update/announcement/2024/suse-su-20240294-1/Advisory
bugzilla.suse.com/1218894REPORT
www.suse.com/security/cve/CVE-2024-21626WEB
www.suse.com/support/update/announcement/2024/suse-su-20240295-1/Advisory
www.suse.com/support/update/announcement/2024/suse-su-20240328-1/Advisory
www.suse.com/support/update/announcement/2024/suse-su-20240459-1/Advisory
access.redhat.com/errata/RHEA-2024:6124Advisory
access.redhat.com/security/vulnerabilities/RHSB-2024-001ARTICLE
issues.redhat.com/browse/OCPBUGS-38848ARTICLE
issues.redhat.com/browse/OCPBUGS-38974ARTICLE
issues.redhat.com/browse/OCPBUGS-39260ARTICLE
issues.redhat.com/browse/OCPBUGS-41510ARTICLE
issues.redhat.com/browse/OCPBUGS-45973ARTICLE
issues.redhat.com/browse/OCPBUGS-47463ARTICLE
issues.redhat.com/browse/OCPBUGS-48577ARTICLE
issues.redhat.com/browse/OCPBUGS-49417ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2024_6124.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2024-21626AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2024-21626AdvisoryOval
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0645.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0662.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0666.jsonAdvisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0670.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0684.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0717.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0752.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0755.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0756.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0757.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0758.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0759.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0760.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0764.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10149.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10520.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10525.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10841.jsonAdvisory
access.redhat.com/security/vulnerabilities/CVE-2024-21626ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1270.jsonAdvisory
ubuntu.com/security/CVE-2024-21626REPORT
ubuntu.com/security/notices/USN-6619-1Advisory
security-tracker.debian.org/tracker/CVE-2024-21626Advisory
github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21626.jsonAdvisory
github.com/opencontainers/runcPACKAGE
lists.fedoraproject.org/archives/…WEB
lists.fedoraproject.org/archives/…WEB
security.alpinelinux.org/vuln/CVE-2024-21626Advisory