Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

runc container escape with malicious config due to /dev/console mount and related races

🗓️ 05 Nov 2025 17:34:49Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 8 Views

Runc escape via risky /dev/console bind-mount enabling writes to /proc paths after pivot_root.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which are vulnerable to CVEs.
24 Feb 202606:14
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
4 Mar 202615:08
–ibm
Tenable Nessus		Amazon Linux 2023 : runc (ALAS2023-2025-1286)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2DOCKER-2025-085 (ALASDOCKER-2025-085)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2ECS-2025-082 (ALASECS-2025-082)
11 Nov 202500:00
–nessus
Tenable Nessus		Amazon Linux 2 : runc, --advisory ALAS2NITRO-ENCLAVES-2025-077 (ALASNITRO-ENCLAVES-2025-077)
11 Nov 202500:00
–nessus
Tenable Nessus		Alibaba Cloud Linux 3 : 0184: container-tools:an8 (ALINUX3-SA-2025:0184)
22 Nov 202500:00
–nessus
Tenable Nessus		AlmaLinux 9 : runc (ALSA-2025:19927)
10 Nov 202500:00
–nessus
Tenable Nessus		AlmaLinux 9 : runc (ALSA-2025:20957)
19 Nov 202500:00
–nessus
Tenable Nessus		AlmaLinux 8 : container-tools:rhel8 (ALSA-2025:21232)
20 Nov 202500:00
–nessus
Rows per page
Vulners
Node
opencontainersruncRange1.4.0-rc.1–1.4.0-rc.2go
OR
opencontainersruncRange1.3.0-rc.1–1.3.2go
OR
opencontainersruncRange1.0.0-rc3–1.2.7go
SourceLink
githubwww.github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r
githubwww.github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4
githubwww.github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398
githubwww.github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e
githubwww.github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d
githubwww.github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a
githubwww.github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64
githubwww.github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8
githubwww.github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480
nvdwww.nvd.nist.gov/vuln/detail/CVE-2025-52565
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
06 Nov 2025 23:12Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.17.5
CVSS 48.4
EPSS0.00026
SSVC
CWE-61CWE-363
runcconsole bind mountproc path writepivot root
8