GO-2025-4096
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
At a glance
- Published
- Updated
- CVE
- CVE-2025-31133
- Aliases
- GHSA-9493-h29p-rfm2
Description
Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/opencontainers/runc | introduced 0, fixed 1.2.8, introduced 1.3.0-rc.1, fixed 1.3.3, introduced 1.4.0-rc.1, fixed 1.4.0-rc.3 |
References
- https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2 ADVISORY
- https://github.com/opencontainers/runc/commit/1a30a8f3d921acbbb6a4bb7e99da2c05f8d48522 FIX
- https://github.com/opencontainers/runc/commit/5d7b2424072449872d1cd0c937f2ca25f418eb66 FIX
- https://github.com/opencontainers/runc/commit/8476df83b534a2522b878c0507b3491def48db9f FIX
- https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |