# CVE-2025-31133: runc container escape via "masked path" abuse due to mount race conditions

CVE-2025-31133 is fixed in 40 products on 1 platform, first by runc 1.3.3-0ubuntu1~22.04.2, released November 5, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-31133
- Priority: High
- CVSS: 8.2 (Important)
- EPSS: 0.0125
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 5, 2025
- Weakness: UNIX Symbolic Link (Symlink) Following
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-31133

## Description

runc is a CLI tool for spawning and running containers according to the OCIspecification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1,1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficientverification that the source of the bind-mount (i.e., the container's/dev/null) was actually a real /dev/null inode when using the container's/dev/null to mask. This exposes two methods of attack:  an arbitrary mountgadget, leading to host information disclosure, host denial of service,container escape, or a bypassing of maskedPaths. This issue is fixed inversions 1.2.8, 1.3.3 and 1.4.0-rc.3.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | aardvark-dns RHEL 8 | 2:1.10.1-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | aardvark-dns almalinux 8 | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | aardvark-dns ol 8 | 2:1.10.1-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | aardvark-dns rocky 8 | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | alloy opensuse-leap 16.0 | 1.12.2-160000.1.1 | [OPENSUSE-SU-2026:20140-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20140-1.md) | Jan 30, 2026 |
| Linux | alloy sles 15.7 | 1.12.2-150700.15.15.1 | [SUSE-SU-2026:0327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0327-1.md) | Jan 28, 2026 |
| Linux | alloy sles 16.0 | 1.12.2-160000.1.1 | [SUSE-SU-2026:20214-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20214-1.md) | Jan 30, 2026 |
| Linux | buildah RHEL 8 | 2:1.33.12-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | buildah almalinux 8 | 2:1.33.12-2.module_el8.10.0+4023+db236c53 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | buildah ol 8 | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | buildah opensuse-leap 16.0 | 1.39.5-160000.1.1 | [OPENSUSE-SU-2026:20080-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20080-1.md) | Jan 22, 2026 |
| Linux | buildah rocky 8 | 2:1.33.12-2.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | buildah sles 16.0 | 1.39.5-160000.1.1 | [SUSE-SU-2026:20123-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20123-1.md) | Jan 22, 2026 |
| Linux | buildah-tests RHEL 8 | 2:1.33.12-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | buildah-tests almalinux 8 | 2:1.33.12-2.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | buildah-tests ol 8 | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | cockpit-podman RHEL 8 | 0:84.1-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | cockpit-podman almalinux 8 | 84.1-1.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | cockpit-podman ol 8 | 0:84.1-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | cockpit-podman rocky 8 | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | conmon RHEL 8 | 3:2.1.10-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | conmon almalinux 8 | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | conmon ol 8 | 3:2.1.10-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | conmon rocky 8 | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | container-selinux RHEL 8 | 2:2.229.0-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | container-selinux almalinux 8 | 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | container-selinux ol 8 | 2:2.229.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | container-selinux rocky 8 | 2:2.229.0-2.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | containernetworking-plugins RHEL 8 | 1:1.4.0-6.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | containernetworking-plugins almalinux 8 | 1:1.4.0-6.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | containernetworking-plugins ol 8 | 1:1.4.0-6.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | containernetworking-plugins rocky 8 | 1:1.4.0-6.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | containers-common RHEL 8 | 2:1-82.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | containers-common almalinux 8 | 2:1-82.module_el8.10.0+3876+e55593a8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | containers-common ol 8 | 2:1-82.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | containers-common rocky 8 | 2:1-82.module+el8.10.0+1880+8e896d1b | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | crit RHEL 8 | 0:3.18-5.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | crit almalinux 8 | 3.18-5.module_el8.10.0+3901+4b80ecd7 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | crit ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu RHEL 8 | 0:3.18-5.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu almalinux 8 | 3.18-5.module_el8.10.0+3926+f12484f5 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu rocky 8 | 0:3.18-5.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | criu-devel RHEL 8 | 0:3.18-5.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu-devel almalinux 8 | 3.18-5.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu-devel ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu-libs RHEL 8 | 0:3.18-5.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu-libs almalinux 8 | 3.18-5.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | criu-libs ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | crun RHEL 8 | 0:1.14.3-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | crun almalinux 8 | 1.14.3-2.module_el8.10.0+3845+87b84552 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | crun ol 8 | 0:1.14.3-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | crun rocky 8 | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.13-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | fuse-overlayfs almalinux 8 | 1.13-1.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | fuse-overlayfs ol 8 | 0:1.13-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | fuse-overlayfs rocky 8 | 0:1.13-1.module+el8.10.0+1815+5fe7415e | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | libslirp RHEL 8 | 0:4.4.0-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | libslirp almalinux 8 | 4.4.0-2.module_el8.10.0+3876+e55593a8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | libslirp ol 8 | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | libslirp rocky 8 | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | libslirp-devel RHEL 8 | 0:4.4.0-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | libslirp-devel almalinux 8 | 4.4.0-2.module_el8.10.0+3909+6e1c1eb7 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | libslirp-devel ol 8 | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | netavark RHEL 8 | 2:1.10.3-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | netavark almalinux 8 | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | netavark ol 8 | 2:1.10.3-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | netavark rocky 8 | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.10-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | oci-seccomp-bpf-hook almalinux 8 | 1.2.10-1.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.10-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | oci-seccomp-bpf-hook rocky 8 | 0:1.2.10-1.module+el8.10.0+1843+6892ab28 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | podman RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman almalinux 8 | 4:4.9.4-23.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman opensuse-leap 15.6 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman opensuse-leap 16.0 | 5.4.2-160000.4.1 | [OPENSUSE-SU-2026:20305-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20305-1.md) | Mar 3, 2026 |
| Linux | podman rocky 8 | 4:4.9.4-23.module+el8.10.0+2064+309a12a4 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | podman sles 15.6 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman sles 15.7 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman sles 16.0 | 5.4.2-160000.4.1 | [SUSE-SU-2026:20626-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20626-1.md) | Mar 3, 2026 |
| Linux | podman-catatonit RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-catatonit almalinux 8 | 4:4.9.4-23.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-catatonit ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-docker RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-docker almalinux 8 | 4:4.9.4-23.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-docker ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-gvproxy RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-gvproxy almalinux 8 | 4:4.9.4-23.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-gvproxy ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-plugins RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-plugins almalinux 8 | 4:4.9.4-23.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-plugins ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-remote RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-remote almalinux 8 | 4:4.9.4-23.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-remote ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-tests RHEL 8 | 4:4.9.4-23.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-tests almalinux 8 | 4:4.9.4-23.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | podman-tests ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | python-podman rocky 8 | 0:4.9.0-3.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | python3-criu RHEL 8 | 0:3.18-5.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | python3-criu almalinux 8 | 3.18-5.module_el8.10.0+3970+8445edf6 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | python3-criu ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | python3-podman RHEL 8 | 0:4.9.0-3.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | python3-podman almalinux 8 | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | python3-podman ol 8 | 0:4.9.0-3.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | runc Debian 14 | 1.3.3+ds1-2 | [DEBIAN-CVE-2025-31133](https://patchblox.com/security/data/fix/linux/debian-cve-2025-31133.md) | Nov 6, 2025 |
| Linux | runc RHEL 8 | 4:1.2.5-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | runc RHEL 9 | 4:1.3.0-4.el9_7 | [RHSA-2025:20957](https://patchblox.com/security/data/fix/linux/rhsa-2025-20957.md) | Nov 11, 2025 |
| Linux | runc Ubuntu 22.04.1 LTS (jammy) | 1.3.3-0ubuntu1~22.04.2 | [runc 1.3.3-0ubuntu1~22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-runc-1.3.3-0ubuntu1-22.04.2.md) | Nov 5, 2025 |
| Linux | runc Ubuntu 24.04.5 LTS (noble) | 1.3.3-0ubuntu1~24.04.2 | [runc 1.3.3-0ubuntu1~24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-runc-1.3.3-0ubuntu1-24.04.2.md) | Nov 5, 2025 |
| Linux | runc Ubuntu 25.04 (plucky) | 1.3.3-0ubuntu1~25.04.2 | [runc 1.3.3-0ubuntu1~25.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-runc-1.3.3-0ubuntu1-25.04.2.md) | Jan 16, 2026 |
| Linux | runc Ubuntu 25.10 (questing) | 1.3.3-0ubuntu1~25.10.2 | [runc 1.3.3-0ubuntu1~25.10.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-runc-1.3.3-0ubuntu1-25.10.2.md) | Nov 5, 2025 |
| Linux | runc almalinux 8 | 4:1.2.5-2.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | runc almalinux 9 | 4:1.3.0-4.el9_7 | [ALSA-2025:20957](https://patchblox.com/security/data/fix/linux/alsa-2025-20957.md) | Nov 11, 2025 |
| Linux | runc amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc ol 8 | 4:1.2.5-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | runc ol 9 | 4:1.2.5-3.el9_6 | [ELSA-2025-19927](https://patchblox.com/security/data/fix/linux/elsa-2025-19927.md) | Nov 7, 2025 |
| Linux | runc opensuse-leap 15.6 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc opensuse-leap 16.0 | 1.3.6-160000.1.1 | [OPENSUSE-SU-2026:21431-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21431-1.md) | Jul 23, 2026 |
| Linux | runc rocky 8 | 4:1.2.5-2.module+el8.10.0+2095+5cd7f3af | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | runc rocky 9 | 4:1.3.0-4.el9_7 | [RLSA-2025:20957](https://patchblox.com/security/data/fix/linux/rlsa-2025-20957.md) | Nov 21, 2025 |
| Linux | runc sles 15.6 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc sles 15.7 | 1.3.6-150000.101.1 | [SUSE-SU-2026:3433-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3433-1.md) | Jul 30, 2026 |
| Linux | runc sles 15.7 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc sles 16.0 | 1.3.6-160000.1.1 | [SUSE-SU-2026:22942-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22942-1.md) | Jul 23, 2026 |
| Linux | runc-debuginfo amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc-debugsource amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc-stable Ubuntu 25.10 (questing) | 1.3.3-0ubuntu1~25.10.2 | [runc-stable 1.3.3-0ubuntu1~25.10.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-runc-stable-1.3.3-0ubuntu1-25.10.2.md) | Nov 5, 2025 |
| Linux | skopeo RHEL 8 | 2:1.14.5-4.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | skopeo almalinux 8 | 2:1.14.5-4.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | skopeo ol 8 | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | skopeo rocky 8 | 2:1.14.5-4.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | skopeo-tests RHEL 8 | 2:1.14.5-4.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | skopeo-tests almalinux 8 | 2:1.14.5-4.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | skopeo-tests ol 8 | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | slirp4netns RHEL 8 | 0:1.2.3-1.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | slirp4netns almalinux 8 | 1.2.3-1.module_el8.10.0+4047+545787c4 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | slirp4netns ol 8 | 0:1.2.3-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | slirp4netns rocky 8 | 0:1.2.3-1.module+el8.10.0+1825+623b0c20 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | toolbox RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | toolbox almalinux 8 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | toolbox rocky 8 | 0:0.0.99.5-2.module+el8.10.0+1872+2e18eb19.rocky.0.2 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | toolbox-tests RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | toolbox-tests almalinux 8 | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | udica RHEL 8 | 0:0.2.6-21.module+el8.10.0+23647+cfd78660 | [RHSA-2025:21232](https://patchblox.com/security/data/fix/linux/rhsa-2025-21232.md) | Nov 13, 2025 |
| Linux | udica almalinux 8 | 0.2.6-21.module_el8.10.0+4068+0e21408f | [ALSA-2025:21232](https://patchblox.com/security/data/fix/linux/alsa-2025-21232.md) | Nov 13, 2025 |
| Linux | udica ol 8 | 0:0.2.6-21.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | udica rocky 8 | 0:0.2.6-21.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.