CVE-2024-21626

PoC de CVE-2024-21626 Lee mi artículo completo para una explicación detallada aquí. Artículo relacionado Mientras investigaba CVE-2024–21626 , descubrí una vulnerabilidad pasada por alto en versiones antiguas de Docker y runC. Para obtener más información sobre lo que encontré, lee el siguiente...

CVE-2024-21626

Este repositorio no tiene un README...

Rocky Linux 8.6 [CIQ] Security Update: crit / criu / criu-debuginfo / criu-debugsource / criu-devel / etc (ciqsa-2026_1080)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261080 advisory. This advisory aggregates security fixes for the criu SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...

Rocky Linux 8.6 [CIQ] Security Update: podman / podman-catatonit / podman-catatonit-debuginfo / etc (ciqsa-2026_1081)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261081 advisory. This advisory aggregates security fixes for the podman SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description...

Rocky Linux 8.6 [CIQ] Security Update: slirp4netns / slirp4netns-debuginfo / slirp4netns-debugsource (ciqsa-2026_1083)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261083 advisory. This advisory aggregates security fixes for the slirp4netns SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding descripti...

Rocky Linux 8.6 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (ciqsa-2026_1095)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261095 advisory. This advisory aggregates security fixes for the runc SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2024-21626. Tenable has extracted the preceding description bloc...

container-escape-ebpf

Documento técnico https://www.scs-europe.net/dlib/2026/2026-0321.html Suposiciones El host ejecuta una versión vulnerable de runc: Para CVE-2025-31133: 1.2.7 y anteriores, 1.3.0-rc.1 hasta 1.3.2, 1.4.0-rc.1 y 1.4.0-rc.2. Para CVE-2024-21626: 1.0.0-rc93 hasta 1.1.11. Un usuario no privilegiado pue...

CVE-2024-21626-old-docker-versions

Container escape vulnerability in old runc components CVE-2024-21626 During my analysis about CVE-2024-21626 I found that other older docker components are vulnerable about fd leakage that is not mentioned in the security advisory GHSA-xr7r-f8xq-vfvv. Read my full article for detailed explanation...

RHCOS 4 : OpenShift Container Platform 4.15.41 (RHSA-2024:10841)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10841 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHCOS 4 : OpenShift Container Platform 4.17.7 (RHSA-2024:10520)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10520 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHCOS 4 : Red Hat build of MicroShift 4.14.42 (RHSA-2024:10525)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:10525 advisory. - runc: file descriptor leak CVE-2024-21626 Note that Nessus has not tested for this issue but has instead relied only on the application's...

MiracleLinux 9 : runc-1.1.12-1.el9_3 (AXSA:2024-7505:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2024-7505:01 advisory. runc: file descriptor leak CVE-2024-21626 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

CVE-2024-21626 affecting package podman for versions less than 5.6.1-2

CVE-2024-21626 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

Exploit for File Descriptor Leak in Linuxfoundation Runc

CVE-2024-21626 Root cuase & Proof of cause How to use p...

NewStart CGSL MAIN 7.02 : runc Vulnerability (NS-SA-2025-0145)

The remote NewStart CGSL host, running version MAIN 7.02, has runc packages installed that are affected by a vulnerability: - runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an...

TencentOS Server 4: runc (TSSA-2024:0599)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0599 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 2: runc (TSSA-2024:0304)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0304 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

openSUSE Security Advisory (SUSE-SU-2024:0295-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.16.32 bug fix and security update

Red Hat OpenShift Container Platform release 4.16.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.16. Red Hat Product Security has rated this update as having a...