CVE-2024-11218 is a vulnerability in podman build and buildah where a race condition triggered by the --jobs=2 option during the build of a malicious Containerfile allows a container breakout. This improper privilege management flaw permits an attacker to escape container isolation, potentially enumerating files and directories on the host even when SELinux is enabled. The vulnerability affects multiple versions of OpenShift Container Platform (4.16 and 4.17) and is rated with a CVSS 3.1 base score of 8.6 (AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H), reflecting a high-severity issue with local attack vector, low attack complexity, no privileges required, user interaction required, scope change, and high impact on confidentiality, integrity, and availability. Red Hat has issued official security advisories (RHSA-2025:0830 and RHSA-2025:0878) providing updated packages that fix this issue.

Successful exploitation of this vulnerability allows an attacker with local user access to escape container isolation via a race condition during container image building, leading to potential full compromise of the host system's confidentiality, integrity, and availability. Even with SELinux enabled, attackers may enumerate host files and directories, increasing the risk of sensitive data exposure and further system compromise.

Official security updates addressing CVE-2024-11218 have been released by Red Hat for OpenShift Container Platform versions 4.16 and 4.17. Users should upgrade to the latest patched packages and container images available in their respective release channels. Red Hat provides detailed upgrade instructions via the OpenShift CLI and web console. No additional mitigation steps are indicated beyond applying these official fixes.