CVE-2019-19921

runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation
of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an
attacker must be able to spawn two containers with custom volume-mount
configurations, and be able to run custom images. (This vulnerability does
not affect Docker due to an implementation detail that happens to block the
attack.)

Bugs

• <https://bugs.launchpad.net/bugs/1863669&gt;
• <https://github.com/opencontainers/runc/issues/2197&gt;