SUSE-SU-2026:3428-1: runc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:3428-1 is a vulnerability in runc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 30-07-2026PublishedVulnerability first disclosed.
- 31-07-2026Last modifiedVulnerability information updated.
Description
Security update for runc This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a `/dev` symlink can trigger limited host filesystem integrity violations (bsc#1268275). Other updates and bugfixes: - Version 1.3.6: * When masking directories with `maskPaths`, runc will now re- use a single `tmpfs` instance (which is not writeable) to reduce the number `tmpfs` superblocks that need to be reaped when containers die (in particular, Kubernetes applies masks to per-CPU sysfs directories which get expensive quickly). - Version 1.3.5: * Recursive atime-related mount flags (rrelatime et al.) are now applied properly. * PR #4757 caused a regression that resulted in spurious cannot start a container that has stopped errors when running runc create and has thus been reverted. * Updated builds to Go 1.25, libseccomp v2.6.0. * Minor signing keyring updates.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- runc&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 1.3.6-16.76.1
1 vendor · 1 product