Threats tagged 'ghsa-9493-h29p-rfm2'

CVE-2025-31133 is a vulnerability in runc's handling of the OCI runtime specification's maskedPaths feature. It allows attackers to exploit race conditions involving the container's /dev/null bind-mount to perform arbitrary mount operations, potentially leading to host denial of service or container escape with root privileges. The flaw arises because runc does not sufficiently verify that the source of the bind-mount is a genuine /dev/null inode and improperly ignores certain errors, enabling attackers to bypass maskedPaths protections. Fixed versions 1.2.8, 1.3.3, and 1.4.0-rc.3 address these issues.