Skip to main content
CVE-2024-21626VulnerabilityPublished Updated

Red Hat Security Advisory: container-tools:rhel8 security update

Affects Red Hat container-tools:rhel8Source GCVE Database

0
Compare

Public exploit available (Metasploit) · 18% EPSS.

Data as of 29 Oct 2026, 10:36 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
18.9% chance of exploitation in 30 days – higher than 97% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 8 Feb 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    1 Metasploit module

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released an official security update for the container-tools module in Red Hat Enterprise Linux 8 that fixes the file descriptor leak in runc (CVE-2024-21626). Users should apply the update as detailed in the Red Hat advisory RHSA-2024:0752 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.

Description

A security update for the container-tools module in Red Hat Enterprise Linux 8 addresses a file descriptor leak vulnerability in runc (CVE-2024-21626). This vulnerability is rated as important by Red Hat and has a high severity rating. Public exploit code is available via Metasploit. The update is available for multiple Red Hat Enterprise Linux 8 variants and architectures.

References

Community reviews

Loading reviews…