Podman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
Historical advisory recorded 30 Oct 2026 19:45:26 UTC. Read the latest advisory.
cve-program · CVE-2024-9341
PublishedA flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2024-9341
PublishedPodman: buildah: cri-o: fips crypto-policy directory mounting issue in containers/common go library
A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the containers/common Go library. This flaw allows an attacker to exploit symbolic links and trick the system into mounting sensitive host directories inside a container. This issue also allows attackers to access critical host files, bypassing the intended isolation between containers and the host system.
- Source published
- 1 Oct 2024 18:52:00 UTC
- Source modified
- 30 Oct 2026 18:13:53 UTC
- Saved here
- 30 Oct 2026 19:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 3.1 · 5.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N