Skip to main content
CVE-2024-24788VulnerabilityPublished Updated

SUSE · security update for oci-seccomp-bpf-hook

Affects SUSESource GCVE Database

0

Not known to be exploited · fixed in 9.9.0 : update SUSE when convenient.

Data as of 26 Oct 2026, 06:26 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
1.0% chance of exploitation in 30 days – higher than 62% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 9.9.0, 9.7.0, 9.5.0

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 12 Nov 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.

What to do

Upgrade SUSE to 9.9.0, 9.7.0 or 9.5.0.

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • >=9.0.0 <9.5.0
  • >=9.4.0 <9.5.0
  • >=9.6.0 <9.7.0
  • >=9.8.0 <9.9.0
  • Red Hat
  • Red Hat Enterprise Linux
  • Red Hat Enterprise Linux AppStream (v. 9)
  • aarch64
  • go-toolset-0:1.21.10-1.el9_4.aarch64
  • src
  • runc-4:1.1.13-4.el9.src
  • oci-seccomp-bpf-hook-0:1.2.10-2.el9.src
  • Microsoft
  • Azure Linux
  • 2.0
  • CBL Mariner 2.0
  • 3.0
  • SUSE
  • x86_64
  • oci-seccomp-bpf-hook-0:1.2.10-2.el9.x86_64
  • SUSE Linux Enterprise
  • SUSE Liberty Linux 9
Fixed in
  • 9.5.0
  • 9.7.0
  • 9.9.0

AI-suggested

Red Hat has released an official fix by rebasing golang to version 1.21.10. Users should apply the update as described in the Red Hat advisories RHBA-2024:3840 and RHSA-2024:9200. The advisories include detailed instructions and updated packages for all affected Red Hat Enterprise Linux 9 variants and architectures. Applying this update remediates the vulnerability.

Description

To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

References

Community reviews

Loading reviews…