CVE-2026-47766

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs "/dev" directory without "ONOFOLLOW". If an OCI bundle contains "rootfs/dev" as a symlink and the bundle configuration does not mount "/dev", crun follows...