{"id":"GHSA-qw9x-cqr3-wc7r","revision":null,"records":[{"revision":"3ce38ee1864f4f7482350979905bd1f3","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-52565","aliases":[],"title":"container escape due to /dev/console mount and related races","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/console` inside the container, an attacker can trick runc into bind-mounting paths which would normally be made read-only or be masked onto a path that the attacker can write to. This attack is very similar in concept and application to CVE-2025-31133, except that it attacks a similar vulnerability in a different target (namely, the bind-mount of `/dev/pts/$n` to `/dev/console` as configured for all containers that allocate a console). This happens after `pivot_root(2)`, so this cannot be used to write to host files directly -- however, as with CVE-2025-31133, this can load to denial of service of the host or a container breakout by providing the attacker with a writable copy of `/proc/sysrq-trigger` or `/proc/sys/kernel/core_pattern` (respectively). This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.","state":0,"publishedAt":"2025-11-06T20:02:58.513+00:00","modifiedAt":"2025-11-06T21:32:19.129+00:00","affected":[{"ecosystem":"Vendor product","name":"runc","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"opencontainers\",\n                    \"product\": \"runc\",\n                    \"versions\": [\n                        {\n                            \"version\": \">= 1.0.0-rc3, < 1.2.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 1.3.0-rc.1, < 1.3.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \">= 1.4.0-rc.1, < 1.4.0-rc.3\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H","score":8.4,"severity":"HIGH"}],"references":["https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-52565","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-52565","identifiers":["CVE-2025-52565"]},"retained":false,"historicalAffected":[]},{"revision":"75b8472c8e904b60ae36fa5409e474f1","observedAt":"2026-11-15T04:34:49.887+00:00","statement":{"source":"euvd","id":"EUVD-2025-37944","aliases":["CVE-2025-52565","GHSA-qw9x-cqr3-wc7r"],"title":"runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pt…","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/console` inside the container, an attacker can trick runc into bind-mounting paths which would normally be made read-only or be masked onto a path that the attacker can write to. This attack is very similar in concept and application to CVE-2025-31133, except that it attacks a similar vulnerability in a different target (namely, the bind-mount of `/dev/pts/$n` to `/dev/console` as configured for all containers that allocate a console). This happens after `pivot_root(2)`, so this cannot be used to write to host files directly -- however, as with CVE-2025-31133, this can load to denial of service of the host or a container breakout by providing the attacker with a writable copy of `/proc/sysrq-trigger` or `/proc/sys/kernel/core_pattern` (respectively). This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H","score":8.4,"severity":null}],"references":["https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-37944","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 6, 2025, 8:02:58 PM","dateUpdated":"Nov 6, 2025, 9:32:19 PM"},"relatedAdvisories":[{"id":"SUSE-SU-2025:21072-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4081-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:0315","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.84 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:20103-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-9566"]},{"id":"RHSA-2026:10703","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"RHSA-2025:21328","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.59 packages and security update","vulnerabilityIds":["CVE-2025-22871","CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:3428-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2026-41579"]},{"id":"RHSA-2025:23202","title":"Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.5 (CUDA)","vulnerabilityIds":["CVE-2025-9230","CVE-2025-9714","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-59375","CVE-2025-66506"]},{"id":"RHBA-2025:21361","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.19.19 packages update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2025:23079","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm)","vulnerabilityIds":["CVE-2023-48022","CVE-2023-52355","CVE-2023-52356","CVE-2024-56433","CVE-2025-5318","CVE-2025-6242","CVE-2025-6965","CVE-2025-8176","CVE-2025-9230","CVE-2025-9900","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-53905","CVE-2025-53906","CVE-2025-59375","CVE-2025-59425","CVE-2025-62593","CVE-2025-62727","CVE-2025-66448"]},{"id":"SUSE-SU-2026:0327-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-68156"]},{"id":"RHSA-2025:20957","title":"Red Hat Security Advisory: runc security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:3461","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)","vulnerabilityIds":["CVE-2023-48022","CVE-2023-52355","CVE-2023-52356","CVE-2024-56433","CVE-2025-5318","CVE-2025-6242","CVE-2025-6965","CVE-2025-8176","CVE-2025-9230","CVE-2025-9714","CVE-2025-9900","CVE-2025-15467","CVE-2025-22868","CVE-2025-22869","CVE-2025-47906","CVE-2025-52565","CVE-2025-53905","CVE-2025-53906","CVE-2025-59375","CVE-2025-59425","CVE-2025-61620","CVE-2025-62164","CVE-2025-62372","CVE-2025-62426","CVE-2025-62593","CVE-2025-62727","CVE-2025-66418","CVE-2025-66448","CVE-2025-66471","CVE-2025-66506","CVE-2025-69223","CVE-2026-0994","CVE-2026-21441","CVE-2026-22773","CVE-2026-22778","CVE-2026-22807","CVE-2026-24049","CVE-2026-24486","CVE-2026-24779","CVE-2026-25990"]},{"id":"RHSA-2026:0995","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.61 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"openSUSE-SU-2025:15705-1","title":"runc-1.3.3-1.1 on GA media","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:22938-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2026-41579"]},{"id":"openSUSE-SU-2026:20072-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-9566"]},{"id":"openSUSE-SU-2025:20072-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:6492","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.87 bug fix and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-61662"]},{"id":"RHSA-2026:0425","title":"Red Hat Security Advisory: runc security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-65637"]},{"id":"openSUSE-SU-2026:20305-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2025:23078","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)","vulnerabilityIds":["CVE-2023-48022","CVE-2023-52355","CVE-2023-52356","CVE-2024-56433","CVE-2025-5318","CVE-2025-6242","CVE-2025-6965","CVE-2025-8176","CVE-2025-9230","CVE-2025-9900","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-53905","CVE-2025-53906","CVE-2025-59375","CVE-2025-59425","CVE-2025-62593","CVE-2025-62727","CVE-2025-66448"]},{"id":"WID-SEC-W-2025-2518","title":"Red Hat Enterprise Linux (runc): Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"openSUSE-SU-2026:20080-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2025:23113","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.60 bug fix and security update","vulnerabilityIds":["CVE-2025-4953","CVE-2025-11561","CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4077-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2025:21824","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.53 bug fix and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2025:23449","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm)","vulnerabilityIds":["CVE-2025-9230","CVE-2025-9714","CVE-2025-22868","CVE-2025-22869","CVE-2025-47906","CVE-2025-52565","CVE-2025-59375","CVE-2025-62164","CVE-2025-62372","CVE-2025-66448","CVE-2025-66506"]},{"id":"RHSA-2026:3462","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (ROCm)","vulnerabilityIds":["CVE-2023-48022","CVE-2023-52355","CVE-2023-52356","CVE-2024-56433","CVE-2025-5318","CVE-2025-6242","CVE-2025-6965","CVE-2025-8176","CVE-2025-9230","CVE-2025-9714","CVE-2025-9900","CVE-2025-15467","CVE-2025-22868","CVE-2025-22869","CVE-2025-47906","CVE-2025-52565","CVE-2025-53905","CVE-2025-53906","CVE-2025-59375","CVE-2025-59425","CVE-2025-61620","CVE-2025-62164","CVE-2025-62372","CVE-2025-62426","CVE-2025-62593","CVE-2025-62727","CVE-2025-66418","CVE-2025-66448","CVE-2025-66471","CVE-2025-66506","CVE-2025-69223","CVE-2026-0994","CVE-2026-21441","CVE-2026-22773","CVE-2026-22778","CVE-2026-22807","CVE-2026-24049","CVE-2026-24486","CVE-2026-24779","CVE-2026-25990"]},{"id":"RHSA-2026:0701","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.47 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:20626-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2026:0331","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.31 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4073-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4079-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:22942-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2026-41579"]},{"id":"RHSA-2025:19927","title":"Red Hat Security Advisory: runc security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"openSUSE-SU-2026:21431-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2026-41579"]},{"id":"SUSE-SU-2026:20123-1","title":"Security update for buildah","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHBA-2025:21221","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.17.44 packages update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565"]},{"id":"SUSE-SU-2025:21036-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:3951-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"WID-SEC-W-2026-2253","title":"IBM Security Verify Access: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-19921","CVE-2022-48830","CVE-2022-49024","CVE-2022-49269","CVE-2022-49353","CVE-2022-49357","CVE-2022-49432","CVE-2022-49437","CVE-2022-49443","CVE-2022-49623","CVE-2022-49627","CVE-2022-49643","CVE-2022-49648","CVE-2022-49657","CVE-2022-49670","CVE-2022-49672","CVE-2022-49845","CVE-2023-40403","CVE-2023-53034","CVE-2024-29371","CVE-2024-36350","CVE-2024-36357","CVE-2024-46689","CVE-2024-46744","CVE-2024-47679","CVE-2024-47727","CVE-2024-49570","CVE-2024-49864","CVE-2024-50060","CVE-2024-50195","CVE-2024-50294","CVE-2024-52332","CVE-2024-53052","CVE-2024-53090","CVE-2024-53119","CVE-2024-53135","CVE-2024-53170","CVE-2024-53216","CVE-2024-53229","CVE-2024-53241","CVE-2024-53680","CVE-2024-54456","CVE-2024-56603","CVE-2024-56645","CVE-2024-56662","CVE-2024-56672","CVE-2024-56675","CVE-2024-56690","CVE-2024-56709","CVE-2024-56739","CVE-2024-56786","CVE-2024-57981","CVE-2024-57986","CVE-2024-57987","CVE-2024-57988","CVE-2024-57989","CVE-2024-57990","CVE-2024-57993","CVE-2024-57995","CVE-2024-57998","CVE-2024-58012","CVE-2024-58014","CVE-2024-58015","CVE-2024-58057","CVE-2024-58062","CVE-2024-58068","CVE-2024-58072","CVE-2024-58075","CVE-2024-58077","CVE-2024-58083","CVE-2024-58088","CVE-2025-10158","CVE-2025-11187","CVE-2025-12084","CVE-2025-14104","CVE-2025-14831","CVE-2025-14917","CVE-2025-14923","CVE-2025-15467","CVE-2025-15468","CVE-2025-15469","CVE-2025-21631","CVE-2025-21647","CVE-2025-21648","CVE-2025-21671","CVE-2025-21672","CVE-2025-21691","CVE-2025-21693","CVE-2025-21696","CVE-2025-21702","CVE-2025-21714","CVE-2025-21726","CVE-2025-21728","CVE-2025-21729","CVE-2025-21738","CVE-2025-21739","CVE-2025-21745","CVE-2025-21746","CVE-2025-21765","CVE-2025-21786","CVE-2025-21787","CVE-2025-21790","CVE-2025-21791","CVE-2025-21795","CVE-2025-21796","CVE-2025-21806","CVE-2025-21826","CVE-2025-21828","CVE-2025-21829","CVE-2025-21837","CVE-2025-21839","CVE-2025-21844","CVE-2025-21846","CVE-2025-21847","CVE-2025-21848","CVE-2025-21851","CVE-2025-21853","CVE-2025-21855","CVE-2025-21861","CVE-2025-21863","CVE-2025-21864","CVE-2025-22056","CVE-2025-22097","CVE-2025-31133","CVE-2025-37789","CVE-2025-37819","CVE-2025-37994","CVE-2025-38022","CVE-2025-38024","CVE-2025-38106","CVE-2025-38116","CVE-2025-38129","CVE-2025-38141","CVE-2025-38180","CVE-2025-38206","CVE-2025-38349","CVE-2025-38396","CVE-2025-38403","CVE-2025-38415","CVE-2025-38459","CVE-2025-38730","CVE-2025-38731","CVE-2025-39760","CVE-2025-39806","CVE-2025-39818","CVE-2025-39840","CVE-2025-39843","CVE-2025-39883","CVE-2025-40064","CVE-2025-40096","CVE-2025-40135","CVE-2025-40141","CVE-2025-40158","CVE-2025-40170","CVE-2025-40240","CVE-2025-40248","CVE-2025-40258","CVE-2025-40269","CVE-2025-40271","CVE-2025-40294","CVE-2025-40300","CVE-2025-40304","CVE-2025-40318","CVE-2025-40322","CVE-2025-45582","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-5318","CVE-2025-59375","CVE-2025-61662","CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-65018","CVE-2025-66199","CVE-2025-66418","CVE-2025-66471","CVE-2025-68121","CVE-2025-68160","CVE-2025-68301","CVE-2025-68305","CVE-2025-68349","CVE-2025-68615","CVE-2025-68800","CVE-2025-68811","CVE-2025-68973","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2025-9086","CVE-2025-9714","CVE-2025-9820","CVE-2026-11904","CVE-2026-21441","CVE-2026-22007","CVE-2026-22013","CVE-2026-22016","CVE-2026-22018","CVE-2026-22021","CVE-2026-22695","CVE-2026-22795","CVE-2026-22796","CVE-2026-22801","CVE-2026-22998","CVE-2026-23001","CVE-2026-23136","CVE-2026-23144","CVE-2026-23171","CVE-2026-23191","CVE-2026-23193","CVE-2026-23204","CVE-2026-23209","CVE-2026-23270","CVE-2026-25646","CVE-2026-27135","CVE-2026-31402","CVE-2026-31431","CVE-2026-34268","CVE-2026-35385","CVE-2026-35386","CVE-2026-35387","CVE-2026-35388","CVE-2026-35414","CVE-2026-4938","CVE-2026-5516","CVE-2026-7364","CVE-2026-8861"]},{"id":"RHSA-2025:23204","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (CUDA)","vulnerabilityIds":["CVE-2025-9230","CVE-2025-9714","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-59375","CVE-2025-62164","CVE-2025-62372","CVE-2025-62593","CVE-2025-66448","CVE-2025-66506"]},{"id":"SUSE-SU-2025:21038-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"openSUSE-SU-2026:20140-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-68156"]},{"id":"RHSA-2025:21795","title":"Red Hat Security Advisory: OpenShift Container Platform 4.18.29 bug fix and security update","vulnerabilityIds":["CVE-2025-11561","CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:1540","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.61 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-65637"]},{"id":"SUSE-SU-2025:21136-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:21291-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:3950-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:0418","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.55 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:4080-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2026:20641-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-22869","CVE-2025-31133","CVE-2025-47913","CVE-2025-47914","CVE-2025-52565","CVE-2025-52881","CVE-2025-6032","CVE-2025-9566"]},{"id":"RHSA-2025:23209","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (TPU)","vulnerabilityIds":["CVE-2025-9230","CVE-2025-9714","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-59375","CVE-2025-62164","CVE-2025-62372","CVE-2025-66448","CVE-2025-66506"]},{"id":"openSUSE-SU-2025-20072-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHBA-2025:21224","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.20.4 bug fix update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:4693","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2024-45336","CVE-2025-22866","CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"WID-SEC-W-2026-0778","title":"Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2014-8991","CVE-2015-2296","CVE-2019-6778","CVE-2020-10756","CVE-2020-13645","CVE-2020-1983","CVE-2020-24455","CVE-2020-25219","CVE-2020-26154","CVE-2020-29130","CVE-2021-3592","CVE-2021-3593","CVE-2021-3594","CVE-2021-3595","CVE-2022-40897","CVE-2023-22745","CVE-2023-5752","CVE-2024-25621","CVE-2024-29040","CVE-2024-6345","CVE-2025-10911","CVE-2025-11226","CVE-2025-11468","CVE-2025-11563","CVE-2025-11731","CVE-2025-12084","CVE-2025-12781","CVE-2025-1352","CVE-2025-13601","CVE-2025-1372","CVE-2025-1376","CVE-2025-1377","CVE-2025-13836","CVE-2025-13837","CVE-2025-14087","CVE-2025-14512","CVE-2025-15281","CVE-2025-15282","CVE-2025-15366","CVE-2025-15367","CVE-2025-15467","CVE-2025-24294","CVE-2025-28162","CVE-2025-28164","CVE-2025-31133","CVE-2025-3576","CVE-2025-47273","CVE-2025-52565","CVE-2025-52881","CVE-2025-53057","CVE-2025-53666","CVE-2025-54770","CVE-2025-54771","CVE-2025-54798","CVE-2025-55752","CVE-2025-59375","CVE-2025-6075","CVE-2025-61661","CVE-2025-61662","CVE-2025-61663","CVE-2025-61664","CVE-2025-61748","CVE-2025-61795","CVE-2025-61984","CVE-2025-61985","CVE-2025-64329","CVE-2025-64505","CVE-2025-64506","CVE-2025-64720","CVE-2025-64756","CVE-2025-65018","CVE-2025-66035","CVE-2025-66293","CVE-2025-66412","CVE-2025-66614","CVE-2025-67721","CVE-2025-68160","CVE-2025-68973","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2025-69873","CVE-2025-7039","CVE-2025-8291","CVE-2025-9187","CVE-2025-9820","CVE-2026-0672","CVE-2026-0861","CVE-2026-0865","CVE-2026-0915","CVE-2026-0988","CVE-2026-1484","CVE-2026-1485","CVE-2026-1489","CVE-2026-22610","CVE-2026-22695","CVE-2026-22795","CVE-2026-22796","CVE-2026-22801","CVE-2026-24734","CVE-2026-24882","CVE-2026-25646"]},{"id":"RHSA-2025:23205","title":"Red Hat Security Advisory: Red Hat AI Inference Server 3.2.5 (ROCm)","vulnerabilityIds":["CVE-2025-9230","CVE-2025-9714","CVE-2025-22868","CVE-2025-22869","CVE-2025-47906","CVE-2025-52565","CVE-2025-59375","CVE-2025-62164","CVE-2025-62372","CVE-2025-66448","CVE-2025-66506"]},{"id":"SUSE-SU-2025:4073-2","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"SUSE-SU-2025:21054-1","title":"Security update for runc","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2026:8325","title":"Red Hat Security Advisory: buildah, crun, podman, runc, and skopeo security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-47913","CVE-2025-52565","CVE-2025-52881","CVE-2025-58183","CVE-2025-65637"]},{"id":"SUSE-SU-2026:20214-1","title":"Security update for alloy","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-68156"]},{"id":"RHSA-2026:0676","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.63 packages and security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"msrc_CVE-2025-52565","title":"container escape due to /dev/console mount and related races","vulnerabilityIds":["CVE-2025-52565"]},{"id":"RHSA-2025:21232","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]},{"id":"RHSA-2025:23080","title":"Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)","vulnerabilityIds":["CVE-2023-48022","CVE-2023-52355","CVE-2023-52356","CVE-2024-56433","CVE-2025-5318","CVE-2025-6242","CVE-2025-6965","CVE-2025-8176","CVE-2025-9230","CVE-2025-9900","CVE-2025-22868","CVE-2025-22869","CVE-2025-52565","CVE-2025-53905","CVE-2025-53906","CVE-2025-59375","CVE-2025-59425","CVE-2025-62593","CVE-2025-62727","CVE-2025-66448"]},{"id":"WID-SEC-W-2025-2563","title":"Microsoft Azure Linux: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-25621","CVE-2025-10966","CVE-2025-12863","CVE-2025-12875","CVE-2025-31133","CVE-2025-40107","CVE-2025-40109","CVE-2025-52565","CVE-2025-52881","CVE-2025-60753","CVE-2025-62220","CVE-2025-64329","CVE-2025-64432","CVE-2025-64433","CVE-2025-64434","CVE-2025-64435","CVE-2025-64436","CVE-2025-64437"]},{"id":"RHSA-2026:4531","title":"Red Hat Security Advisory: runc security update","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-65637"]},{"id":"SUSE-SU-2026:20116-1","title":"Security update for podman","vulnerabilityIds":["CVE-2025-31133","CVE-2025-52565","CVE-2025-52881","CVE-2025-9566"]},{"id":"RHSA-2025:22275","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.62 bug fix and security update","vulnerabilityIds":["CVE-2025-4953","CVE-2025-5318","CVE-2025-31133","CVE-2025-52565","CVE-2025-52881"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-37944","identifiers":["EUVD-2025-37944","CVE-2025-52565","GHSA-qw9x-cqr3-wc7r"]},"retained":false,"historicalAffected":[]},{"revision":"9e6fd7e0e963443782e152297ee800b3","observedAt":"2026-10-25T02:25:01.737+00:00","statement":{"source":"nvd","id":"CVE-2025-52565","aliases":[],"title":"runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pt…","description":"runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/console` inside the container, an attacker can trick runc into bind-mounting paths which would normally be made read-only or be masked onto a path that the attacker can write to. This attack is very similar in concept and application to CVE-2025-31133, except that it attacks a similar vulnerability in a different target (namely, the bind-mount of `/dev/pts/$n` to `/dev/console` as configured for all containers that allocate a console). This happens after `pivot_root(2)`, so this cannot be used to write to host files directly -- however, as with CVE-2025-31133, this can load to denial of service of the host or a container breakout by providing the attacker with a writable copy of `/proc/sysrq-trigger` or `/proc/sys/kernel/core_pattern` (respectively). This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.","state":0,"publishedAt":"2025-11-06T20:15:49.24+00:00","modifiedAt":"2026-06-17T09:36:41.353+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · security-advisories@github.com · Secondary","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":8.4,"severity":"HIGH"},{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H","score":7.5,"severity":"HIGH"}],"references":["https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480","https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-52565","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Analyzed","weaknesses":["CWE-61","CWE-363"],"productCriteria":["cpe:2.3:a:linuxfoundation:runc:*:*:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc3:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc4:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc5:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc6:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc7:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc8:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc9:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc90:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc91:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc92:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc93:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc94:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.0.0:rc95:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.4.0:rc1:*:*:*:*:*:*","cpe:2.3:a:linuxfoundation:runc:1.4.0:rc2:*:*:*:*:*:*"],"sourceDates":{"published":"2025-11-06T20:15:49.240","lastModified":"2026-06-17T09:36:41.353"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2025-52565","identifiers":["CVE-2025-52565"]},"retained":false,"historicalAffected":[]},{"revision":"e85b94c649b643e8959be6590c1fd249","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-qw9x-cqr3-wc7r","aliases":["CVE-2025-52565","GO-2025-4097"],"title":"runc container escape with malicious config due to /dev/console mount and related races","description":"### Impact ###\nThis attack is very similar in concept and application to CVE-2025-31133, except that it attacks a similar vulnerability in a different target (namely, the bind-mount of `/dev/pts/$n` to `/dev/console` as configured for all containers that allocate a console). \n\nIn runc version 1.0.0-rc3 and later, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/console` inside the container, an attacker can trick runc into bind-mounting paths which would normally be made read-only or be masked onto a path that the attacker can write to. This happens after `pivot_root(2)`, so this cannot be used to write to host files directly -- however, as with CVE-2025-31133, this can load to denial of service of the host or a container breakout by providing the attacker with a writable copy of `/proc/sysrq-trigger` or `/proc/sys/kernel/core_pattern` (respectively). \n\nThe reason that the attacker can gain write access to these files is because the `/dev/console` bind-mount happens before `maskedPaths` and `readonlyPaths` are applied.\n\n#### Additional Findings ####\nWhile investigating this issue, runc discovered some other theoretical issues that may or may not be exploitable, as well as taking the opportunity to fix some fairly well-known issues related to consoles.\n\n##### Issue 1: Problematic Usage of `os.Create` #####\nGo provides an `os.Create` function for creating files, which older code in runc (dating back to the original `libcontainer` from the early 2010s) had a tendency to use fairly liberally. `os.Create` implies `O_CREAT|O_TRUNC` but by design it does not apply `O_NOFOLLOW` nor `O_EXCL`, meaning if the target is swapped with a malicious symlink runc can be tricked into truncating host files (which can lead to denial of service attacks, among other concerns). \n\nRunc conducted an audit of all `os.Create` usages in runc and found some suspicious usages related to device inodes, but based on runc's testing these were not exploitable in practice. Runc now has custom code lints to block any `os.Create` usage in runc, and plan to do a further audit of any other plain `os.*` operation usage throughout runc after this advisory becomes public. \n\nCVE-2024-45310 was a similar attack but without the `O_TRUNC` component (which resulted in a \"Low\" severity) -- a similar attack being exploitable would've been much more severe.\n\n##### Issue 2: Malicious `/dev/pts/$n` Inode Attacks (`TIOCGPTPEER`) #####\nThe (very) classic API for constructing consoles involves first opening `/dev/ptmx` for reading and writing. This allocates a new pseudo-terminal and the returned file descriptor is the \"master\" end (which is used by higher-level runtimes to do I/O with the container). \n\nTraditionally, in order to get the \"slave\" end, you do `ioctl(ptm, TIOCGPTN)` to get the pseudo-terminal number and then open the file in `/dev/pts/` with the corresponding base-10 decimal number of the number returned by `TIOCGPTN`. The naive way of doing this is vulnerable to very basic race attacks where `/dev/pts/$n` is replaced with a different pseudo-terminal or other malicious file. \n\nIn order to provide a mechanism to mitigate this risk, Aleksa Sarai (@cyphar from SUSE) implemented `TIOCGPTPEER` back in 2017 to provide a race-free way of doing the last `TIOCGPTN` step by opening the peer end of the pseudo-terminal directly. However, at the time it was believed to be too impractical to implement this protection in runc due to its no-monitor-process architecture (unlike runtimes like LXC which made use of `TIOCGPTPEER` almost immediately). While working on this advisory, runc found a way to make `TIOCGPTN` usage on pre-4.13 kernels still safe against race attacks and so have implemented both `TIOCGPTPEER` support as well as safe `TIOCGPTN` support as a fallback. \n\nAnother possible target of attack would be replacing `/dev/ptmx` or `/dev/pts/ptmx` with a different inode and tricking runc into trying to operate on it. This is very similar to the core issue in CVE-2025-31133 and had a similar solution. \n\nRunc's analysis was that while this attack appears to be potentially problematic in theory, it seems unlikely to actually be exploitable due to how consoles are treated (runc tries to do several pseudo-terminal-specific `ioctl`s and will error out if they fail -- which happens for most other file types). In principle you could imagine a DoS attack using a disconnected NFS handle but it seems impractical to exploit. However, runc felt it prudent to include a solution (and this also provides a safe mechanism to get the source mount for the `/dev/console` bind-mount issue at the beginning of this advisory).\n\n### Patches ###\nThis advisory is being published as part of a set of three advisories:\n\n  * CVE-2025-31133\n  * CVE-2025-52881\n  * CVE-2025-52565\n\nThe patches fixing this issue have accordingly been combined into a single patchset. The following patches from that patchset resolve the issues in this advisory:\n\n * db19bbed5348 (\"internal/sys: add VerifyInode helper\")\n * ff94f9991bd3 (\"*: switch to safer securejoin.Reopen\")\n * 531ef794e4ec (\"console: use TIOCGPTPEER when allocating peer PTY\")\n * 398955bccb7f (\"console: add fallback for pre-TIOCGPTPEER kernels\")\n * 9be1dbf4ac67 (\"console: avoid trivial symlink attacks for /dev/console\")\n * de87203e625c (\"console: verify /dev/pts/ptmx before use\")\n * 01de9d65dc72 (\"rootfs: avoid using os.Create for new device inodes\")\n * aee7d3fe355d (\"ci: add lint to forbid the usage of os.Create\")\n\nrunc 1.2.8, 1.3.3, and 1.4.0-rc.3 have been released and all contain fixes for these issues. As per [runc's new release model](https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.md), runc 1.1.x and earlier are no longer supported and thus have not been patched.\n\n[CVE-2025-31133]: https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\n[CVE-2025-52565]: https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r\n[CVE-2025-52881]: https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\n[RELEASES.md]: https://github.com/opencontainers/runc/blob/v1.4.0-rc.2/RELEASES.md\n\n### Mitigations ###\n* Use containers with user namespaces (with the host root user not mapped into the container's user namespace). This will block most of the most serious aspects of these attacks, as the `procfs` files used for the container breakout use Unix DAC permissions and user namespaced users will not have access to the relevant files. \n\nAn attacker would still be able to bind-mount host paths into the container but if the host uids and gids mapped into the container do not overlap with ordinary users on the host (which is the generally recommended configuration) then the attacker would likely not be able to read or write to most sensitive host files (depending on the Unix DAC permissions of the host files). Note that this is still technically more privilege than an unprivileged user on the host -- because the bind-mount is done by a privileged process, the attacker would be able to get access to directories whose parents may have denied search access (i.e., they may be able to access paths inside a `chmod 700` directory that would normally block them from resolving subpaths). \n\nRunc would also like to take this opportunity to re-iterate that runc **strongly** recommend all users use user namespaced containers. They have proven to be one of the best security hardening mechanisms against container breakouts, and the kernel applies additional restrictions to user namespaced containers above and beyond the user remapping functionality provided. With the advent of id-mapped mounts (Linux 5.12), there is very little reason to not use user namespaces for most applications. Note that using user namespaces to configure your container does not mean you have to enable unprivileged user namespace creation *inside* the container -- most container runtimes apply a seccomp-bpf profile which blocks `unshare(CLONE_NEWUSER)` inside containers regardless of whether the container itself uses user namespaces. \n\nRootless containers can provide even more protection if your configuration can use them -- by having runc itself be an unprivileged process, in general you would expect the impact scope of a runc bug to be less severe as it would only have the privileges afforded to the host user which spawned runc. \n\n * For non-user namespaced containers, configure all containers you spawn to not permit processes to run with root privileges. In most cases this would require configuring the container to use a non-root user and enabling `noNewPrivileges` to disable any setuid or set-capability binaries. (Note that this is runc's general recommendation for a secure container setup -- it is very difficult, if not impossible, to run an untrusted program with root privileges safely.) If you need to use `ping` in your containers, there is a `net.ipv4.ping_group_range` sysctl that can be used to allow unprivileged users to ping without requiring setuid or set-capability binaries. \n * Do not run untrusted container images from unknown or unverified sources.\n * The default `containers-selinux` SELinux policy mitigates this issue, as (unlike CVE-2025-31133) the `/dev/console` bind-mount does not get relabeled and so the container process cannot write to the bind-mounted procfs file by default.\n\n   Please note that CVE-2025-52881 allows an attacker to bypass LSM labels, and so this mitigation is not that helpful when considered in combination with CVE-2025-52881.\n\n * The default AppArmor policy used by Docker and Podman does not mitigate this issue (as access to `/dev/console`) is usually permitted. Users could create a custom profile that blocks access to `/dev/console`, but such a profile might break regular containers.\n\n   Please note that CVE-2025-52881 allows an attacker to bypass LSM labels, and so the mitigation provided with a custom profile is not that helpful when considered in combination with CVE-2025-52881.\n\n[CVE-2025-31133]: https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2\n[CVE-2025-52881]: https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\n\n### Other Runtimes ###\nAs this vulnerability boils down to a fairly easy-to-make logic bug,runc has provided information to other OCI (crun, youki) and non-OCI (LXC) container runtimes about this vulnerability.\n\nBased on discussions with other runtimes, it seems that crun and youki may have similar security issues and will release a co-ordinated security release along with runc. LXC appears to also be vulnerable in some aspects, but [their security stance][lxc-security] is (understandably) that non-user-namespaced containers are fundamentally insecure by design.\n\n[lxc-security]: https://linuxcontainers.org/lxc/security/\n\n### Credits ###\n\nThanks to Lei Wang (@ssst0n3 from Huawei) and Li Fubang (@lifubang from acmcoder.com, CIIC) for discovering and reporting the main `/dev/console` bind-mount vulnerability, as well as Aleksa Sarai (@cyphar from SUSE) for discovering Issues 1 and 2 and the original research into these classes of issues several years ago.","state":0,"publishedAt":"2025-11-05T17:34:49+00:00","modifiedAt":"2026-09-10T03:50:58.3589736+00:00","affected":[{"ecosystem":"Go","name":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.0.0-rc3"},{"kind":"fixed","version":"1.2.8"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.3.0-rc.1"},{"kind":"fixed","version":"1.3.3"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.4.0-rc.1"},{"kind":"fixed","version":"1.4.0-rc.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V4","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://nvd.nist.gov/vuln/detail/CVE-2025-52565","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480","https://github.com/opencontainers/runc"],"sourceUrl":"https://github.com/advisories/GHSA-qw9x-cqr3-wc7r","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-qw9x-cqr3-wc7r","identifiers":["GHSA-qw9x-cqr3-wc7r","CVE-2025-52565","GO-2025-4097"]},"retained":false,"historicalAffected":[]},{"revision":"161d2110a0c04c08bc50a9717e255410","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4097","aliases":["CVE-2025-52565","GHSA-qw9x-cqr3-wc7r"],"title":"Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc","description":"Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc","state":0,"publishedAt":"2025-11-18T15:44:15+00:00","modifiedAt":"2026-02-04T03:00:55.376695+00:00","affected":[{"ecosystem":"Go","name":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.0.0-rc3"},{"kind":"fixed","version":"1.2.8"},{"kind":"introduced","version":"1.3.0-rc.1"},{"kind":"fixed","version":"1.3.3"},{"kind":"introduced","version":"1.4.0-rc.1"},{"kind":"fixed","version":"1.4.0-rc.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4097","license":"OSV · upstream source license applies","key":"osv:GO-2025-4097","identifiers":["GO-2025-4097","CVE-2025-52565","GHSA-qw9x-cqr3-wc7r"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-15T16:44:15.3023707+00:00","complete":true,"records":1781,"lastAttemptAt":"2026-11-15T16:44:15.3023707+00:00","lastSuccessAt":"2026-11-15T16:44:15.4666527+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.4666537+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-7de4d7559a5263003f03d9f70577ab06f92ba4178309f26fce53e22a4a959294-8f71d3af96fdf2ed4b94ab2afd79a29d16c700cb829d51d7ea3d7481fd01a278","complete":true,"records":425838,"lastAttemptAt":"2026-11-15T16:44:14.9514418+00:00","lastSuccessAt":"2026-11-15T16:44:14.9272907+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:14.9514418+00:00","snapshotPublishedAt":"2026-11-15T16:22:03+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-b4eb881ceb334bb9a445c00e5b571b3d","complete":false,"records":13821,"lastAttemptAt":"2026-11-15T16:53:07.4417863+00:00","lastSuccessAt":"2026-11-15T16:53:07.434+00:00","error":"43 identifier lookups failed; latest failures include AccessDenied (HTTP 403). Other identifiers were checked independently.","lastVerifiedAt":"2026-11-15T16:53:07.434+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13831,"expectedIdentifiers":13874,"failedIdentifiers":43},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-15T16:44:15.3023707+00:00","complete":true,"records":1125,"lastAttemptAt":"2026-11-15T16:44:15.3023707+00:00","lastSuccessAt":"2026-11-15T16:44:15.4675299+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.4675303+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-b8dcff928a3a4fd2a861cd283fe6f01b","complete":true,"records":13833,"lastAttemptAt":"2026-11-15T16:44:16.7227852+00:00","lastSuccessAt":"2026-11-15T15:44:56.582+00:00","error":null,"lastVerifiedAt":"2026-11-15T15:44:56.582+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13874,"expectedIdentifiers":13874,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-64eea06dbd27de8464d5dbce1b78cc794cc59e2d901516ae0d3ea76e624cdae0","complete":true,"records":9955,"lastAttemptAt":"2026-11-15T16:44:15.2192528+00:00","lastSuccessAt":"2026-11-14T13:57:23.1208135+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.2192528+00:00","snapshotPublishedAt":"2026-11-14T13:17:57+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-f4424d7d4861b1af1404bd15abcb83f295dcd003412a9340ca99dc8200aa148a","complete":true,"records":2014,"lastAttemptAt":"2026-11-15T16:44:15.0097292+00:00","lastSuccessAt":"2026-11-13T19:57:08.2864435+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.0097292+00:00","snapshotPublishedAt":"2026-11-13T19:33:10+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-6086d649bcb454cdf302d7d9275177bda73550e1b6e446b3520e9b6266d3582c","complete":true,"records":3148,"lastAttemptAt":"2026-11-15T16:44:15.2376807+00:00","lastSuccessAt":"2026-11-15T11:05:17.1034234+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.2376807+00:00","snapshotPublishedAt":"2026-11-15T10:03:04+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-ff18f36f13fcca3a20a3fb9274b59b8872d18869a99071730e1e79b625c8f612","complete":true,"records":232475,"lastAttemptAt":"2026-11-15T16:44:15.1209325+00:00","lastSuccessAt":"2026-11-15T11:05:10.4195883+00:00","error":null,"lastVerifiedAt":"2026-11-15T16:44:15.1209325+00:00","snapshotPublishedAt":"2026-11-15T10:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}