Go/github.com/opencontainers/runc CVE-2024-21626: unknown, EPSS 18.92%

Container breakout through process.cwd trickery and leaked fds in github.com/opencontainers/runc

Action: Upgrade github.com/opencontainers/runc to 1.1.12 or later.

go get github.com/opencontainers/runc@v1.1.12

Affected

Fixed versions

Sources

• osv: GO-2024-2491
• https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv
• https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf
• http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html

CVE-2024-21626 · published 2024-06-28T15:28:53Z · modified 2026-02-04T02:39:00.262696Z · JSON