Threats tagged 'ghsa-qw9x-cqr3-wc7r'

CVE-2025-52565 is a high-severity vulnerability in runc (versions >=1.0.0-rc3 <1.2.8, >=1.3.0-rc.1 <1.3.3, and >=1.4.0-rc.1 <1.4.0-rc.3) involving improper bind-mounting of /dev/pts/$n to /dev/console inside containers. This allows an attacker to gain write access to sensitive files like /proc/sysrq-trigger or /proc/sys/kernel/core_pattern, potentially causing denial of service or container breakout. The issue arises because the /dev/console bind-mount occurs before readonly and masked paths are applied. Additional related issues include risky use of os.Create and race conditions in pseudo-terminal handling, which have been addressed in the patches. Fixes are available in runc versions 1.2.8, 1.3.3, and 1.4.0-rc.3.