OPENSUSE-SU-2021:1625-1

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2021-43784
Published: 26 Dec 2021, 13:06
Last modified:04 Feb 2026, 02:35

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Dec 2021, 13:06
Published
Vulnerability first disclosed
04 Feb 2026, 02:35
Last Modified
Vulnerability information updated

Description

Security update for runc This update for runc fixes the following issues: Update to runc v1.0.3. * CVE-2021-43784: Fixed a potential vulnerability related to the internal usage of netlink, which is believed to not be exploitable with any released versions of runc (bsc#1193436) * Fixed inability to start a container with read-write bind mount of a read-only fuse host mount. * Fixed inability to start when read-only /dev in set in spec. * Fixed not removing sub-cgroups upon container delete, when rootless cgroup v2 is used with older systemd. * Fixed returning error from GetStats when hugetlb is unsupported (which causes excessive logging for kubernetes). This update was imported from the SUSE:SLE-15:Update update project.

Affected Systems

  • opensuse•runc&distro=openSUSE Leap 15.2

    < 1.0.3-lp152.2.12.1

References (3)