CVE-2026-D0cker

CVE-2026-Pending: 通过 runC maskPaths 漏洞实现容器逃逸 严重级别: 严重 CVSS 9.8 组件: opencontainers/runc libcontainer 漏洞类型: CWE-59: 在访问文件前未正确解析链接（'链接跟随'） 🚨 执行摘要 runc 的 maskPaths 函数存在一个严重漏洞。当在容器内屏蔽敏感路径（如 /proc/kcore）时，runc 使用了 os.OpenFilepath, OPATH, 0 但没有添加 ONOFOLLOW 标志。这允许恶意容器进程将目标路径替换为指向敏感主机文件（例如...

Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: Version 1.3.6: When masking directories with maskPaths, runc will now re- use a...

SUSE-SU-2026:3433-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: When masking directories with maskPaths, runc will now re- use ...

SUSE-SU-2026:22942-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...