CVE-2025-62596

Youki container runtime (Rust) versions ≤ 0.5.6 are affected by a vulnerability in apparmor write-target validation combined with path substitution during pathname resolution. A shared-mount race can substitute intermediate path components, allowing writes to unintended procfs locations and poten...

CVE-2025-62596 youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path...

GHSA-VF95-55W6-QMRF youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Impact youki’s apparmor handling performs insufficiently strict write-target validation, which—combined with path substitution during pathname resolution—can allow writes to unintended procfs locations. Weak write-target check youki only verifies that the destination lies somewhere under procfs. ...

Race Condition Enabling Link Following

Overview Affected versions of this package are vulnerable to Race Condition Enabling Link Following in the handling of procfs file writes. An attacker can cause arbitrary writes to sensitive files or trigger a denial of service by redirecting write operations through race conditions and...

PT-2025-45167

Name of the Vulnerable Software and Affected Versions Youki versions 0.5.6 and below Description Youki, a container runtime written in Rust, has an issue with its apparmor handling. Insufficiently strict write-target validation, combined with path substitution during pathname resolution, can allo...

CVE-2023-50472 affecting package apparmor for versions less than 3.1.7-1

CVE-2023-50472 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...

CVE-2024-31755 affecting package apparmor for versions less than 3.1.7-1

CVE-2024-31755 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...

CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1

CVE-2023-53154 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...

CVE-2023-50471 affecting package apparmor for versions less than 3.1.7-1

CVE-2023-50471 affecting package apparmor for versions less than 3.1.7-1. A patched version of the package is available...

PT-2026-29492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained a flaw in its AppArmor implementation related to differential encoding verification. This flaw allowed for the creation of loops if abused, potentially leading...

EUVD-2018-18305

Malware in sbrugna...

EUVD-2008-0741

Malware in sbrugna...

EUVD-2013-4329

Malware in sbrugna...

EUVD-2015-1474

Malware in sbrugna...

EUVD-2015-1475

Malware in sbrugna...

EUVD-2016-2680

Malware in sbrugna...

EUVD-2017-15563

Malware in sbrugna...

EUVD-2017-3180

Malware in sbrugna...

EUVD-2014-1500

Malware in sbrugna...

EUVD-2016-7120

Malware in sbrugna...