Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66

🗓️ 21 Mar 2025 15:18:28Reported by GitHub Advisory DatabaseType

Libcontainer is vulnerable to capabilities elevation in tenant containers; it requires security fixes.

Reporter	Title	Published	Views	Family All 32
Circl	CVE-2025-27612	21 Mar 202518:29	–	circl
CNNVD	youki 安全漏洞	21 Mar 202500:00	–	cnnvd
CVE	CVE-2025-27612	21 Mar 202514:24	–	cve
Cvelist	CVE-2025-27612 Libcontainer is affected by capabilities elevation	21 Mar 202514:24	–	cvelist
EUVD	EUVD-2025-7244	3 Oct 202520:07	–	euvd
NVD	CVE-2025-27612	21 Mar 202515:15	–	nvd
OPENSUSE Linux	govulncheck-vulndb-0.0.20250327T184518-1.1 on GA media (moderate)	29 Mar 202500:00	–	opensuse
OSV	CVE-2025-27612 Libcontainer is affected by capabilities elevation	21 Mar 202514:24	–	osv
OSV	GHSA-5W4J-F78P-4WH9 Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66	21 Mar 202515:18	–	osv
OSV	GHSA-F3FP-GC8G-VW66 Default inheritable capabilities for linux container should be empty	24 May 202217:36	–	osv

Vulners

Node

Source	Link
github	www.github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66
github	www.github.com/youki-dev/youki/security/advisories/GHSA-5w4j-f78p-4wh9
github	www.github.com/youki-dev/youki/commit/747e342d2026fbf3a395db3e2a491ebef00082f1
github	www.github.com/containers/crun/blob/3ec6298abd79e144fbf3fa6db90793ff4c0516f9/src/exec.c
github	www.github.com/opencontainers/runc/blob/986451c24e17c8d4be3c454f60b1f7be4af3e8b4/exec.go
github	www.github.com/youki-dev/youki/blob/9e63fa4da1672a78ca45100f3059a732784a5174/crates/libcontainer/src/container/tenant_builder.rs
man7	www.man7.org/linux/man-pages/man7/capabilities.7.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27612
github	www.github.com/advisories/GHSA-5w4j-f78p-4wh9

21 Mar 2025 15:42Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.9

EPSS0.00046

SSVC