# CVE-2025-52881: runc: LSM labels can be bypassed with malicious config using dummy procfs files

CVE-2025-52881 is fixed in 40 products on 1 platform, first by runc 1.3.3-0ubuntu1~22.04.2, released November 5, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-52881
- Priority: High
- CVSS: 8.2 (Important)
- EPSS: 0.0080
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Nov 5, 2025
- Weakness: UNIX Symbolic Link (Symlink) Following
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-52881

## Description

runc is a CLI tool for spawning and running containers according to the OCIspecification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker cantrick runc into misdirecting writes to /proc to other procfs files throughthe use of a racing container with shared mounts (we have also verifiedthis attack is possible to exploit using a standard Dockerfile with dockerbuildx build as that also permits triggering parallel execution ofcontainers with custom shared mounts configured). This redirect could bethrough symbolic links in a tmpfs or theoretically other methods such asregular bind-mounts. While similar, the mitigation applied for the relatedCVE, CVE-2019-19921, was fairly limited and effectively only caused runc toverify that when LSM labels are written they are actually procfs files.This issue is fixed in versions 1.2.8, 1.3.3, and 1.4.0-rc.3.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | aardvark-dns RHEL 8 | 2:1.10.1-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | aardvark-dns almalinux 8 | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | aardvark-dns ol 8 | 2:1.10.1-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | aardvark-dns rocky 8 | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | alloy opensuse-leap 16.0 | 1.12.2-160000.1.1 | [OPENSUSE-SU-2026:20140-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20140-1.md) | Jan 30, 2026 |
| Linux | alloy sles 15.7 | 1.12.2-150700.15.15.1 | [SUSE-SU-2026:0327-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-0327-1.md) | Jan 28, 2026 |
| Linux | alloy sles 16.0 | 1.12.2-160000.1.1 | [SUSE-SU-2026:20214-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20214-1.md) | Jan 30, 2026 |
| Linux | buildah RHEL 10 | 1.39.5-1.el10_0 | [RHSA-2025:21633](https://patchblox.com/security/data/fix/linux/rhsa-2025-21633.md) | Nov 5, 2025 |
| Linux | buildah RHEL 8 | 2:1.33.13-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | buildah RHEL 9 | 2:1.41.6-1.el9_7 | [RHSA-2025:22011](https://patchblox.com/security/data/fix/linux/rhsa-2025-22011.md) | Nov 25, 2025 |
| Linux | buildah almalinux 10 | 2:1.41.6-1.el10_1 | [ALSA-2025:22012](https://patchblox.com/security/data/fix/linux/alsa-2025-22012.md) | Nov 25, 2025 |
| Linux | buildah almalinux 8 | 2:1.33.13-1.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | buildah almalinux 9 | 2:1.41.6-1.el9_7 | [ALSA-2025:22011](https://patchblox.com/security/data/fix/linux/alsa-2025-22011.md) | Nov 25, 2025 |
| Linux | buildah ol 10 | 2:1.41.6-1.0.1.el10_1 | [ELSA-2025-22012](https://patchblox.com/security/data/fix/linux/elsa-2025-22012.md) | Dec 2, 2025 |
| Linux | buildah ol 8 | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | buildah ol 9 | 2:1.41.6-1.0.1.el9_7 | [ELSA-2025-22011](https://patchblox.com/security/data/fix/linux/elsa-2025-22011.md) | Nov 25, 2025 |
| Linux | buildah opensuse-leap 15.6 | 1.35.5-150500.3.45.1 | [SUSE-SU-2025:4076-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4076-1.md) | Nov 12, 2025 |
| Linux | buildah opensuse-leap 16.0 | 1.39.5-160000.1.1 | [OPENSUSE-SU-2026:20080-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20080-1.md) | Jan 22, 2026 |
| Linux | buildah rocky 10 | 2:1.41.6-1.el10_1 | [RLSA-2025:22012](https://patchblox.com/security/data/fix/linux/rlsa-2025-22012.md) | Nov 28, 2025 |
| Linux | buildah rocky 8 | 2:1.33.12-2.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | buildah rocky 9 | 2:1.41.6-1.el9_7 | [RLSA-2025:22011](https://patchblox.com/security/data/fix/linux/rlsa-2025-22011.md) | Nov 28, 2025 |
| Linux | buildah sles 15.6 | 1.35.5-150500.3.62.1 | [SUSE-SU-2026:2733-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2733-1.md) | Jul 2, 2026 |
| Linux | buildah sles 15.7 | 1.35.5-150500.3.62.1 | [SUSE-SU-2026:2733-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2733-1.md) | Jul 2, 2026 |
| Linux | buildah sles 16.0 | 1.39.5-160000.1.1 | [SUSE-SU-2026:20123-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20123-1.md) | Jan 22, 2026 |
| Linux | buildah-tests RHEL 8 | 2:1.33.13-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | buildah-tests RHEL 9 | 2:1.41.6-1.el9_7 | [RHSA-2025:22011](https://patchblox.com/security/data/fix/linux/rhsa-2025-22011.md) | Nov 25, 2025 |
| Linux | buildah-tests almalinux 10 | 2:1.41.6-1.el10_1 | [ALSA-2025:22012](https://patchblox.com/security/data/fix/linux/alsa-2025-22012.md) | Nov 25, 2025 |
| Linux | buildah-tests almalinux 8 | 2:1.33.13-1.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | buildah-tests almalinux 9 | 2:1.41.6-1.el9_7 | [ALSA-2025:22011](https://patchblox.com/security/data/fix/linux/alsa-2025-22011.md) | Nov 25, 2025 |
| Linux | buildah-tests ol 10 | 2:1.41.6-1.0.1.el10_1 | [ELSA-2025-22012](https://patchblox.com/security/data/fix/linux/elsa-2025-22012.md) | Dec 2, 2025 |
| Linux | buildah-tests ol 8 | 2:1.33.12-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | buildah-tests ol 9 | 2:1.41.6-1.0.1.el9_7 | [ELSA-2025-22011](https://patchblox.com/security/data/fix/linux/elsa-2025-22011.md) | Nov 25, 2025 |
| Linux | cockpit-podman RHEL 8 | 0:84.1-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | cockpit-podman almalinux 8 | 84.1-1.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | cockpit-podman ol 8 | 0:84.1-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | cockpit-podman rocky 8 | 0:84.1-1.module+el8.10.0+1880+8e896d1b | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | conmon RHEL 8 | 3:2.1.10-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | conmon almalinux 8 | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | conmon ol 8 | 3:2.1.10-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | conmon rocky 8 | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | container-selinux RHEL 8 | 2:2.229.0-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | container-selinux almalinux 8 | 2:2.229.0-2.module_el8.10.0+3909+6e1c1eb7 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | container-selinux ol 8 | 2:2.229.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | container-selinux rocky 8 | 2:2.229.0-2.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | containernetworking-plugins RHEL 8 | 1:1.4.0-6.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | containernetworking-plugins almalinux 8 | 1:1.4.0-6.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | containernetworking-plugins ol 8 | 1:1.4.0-6.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | containernetworking-plugins rocky 8 | 1:1.4.0-6.module+el8.10.0+2001+6a33db9f | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | containers-common RHEL 8 | 2:1-82.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | containers-common almalinux 8 | 2:1-82.module_el8.10.0+3876+e55593a8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | containers-common ol 8 | 2:1-82.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | containers-common rocky 8 | 2:1-82.module+el8.10.0+1872+2e18eb19 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | crit RHEL 8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | crit almalinux 8 | 3.18-5.module_el8.10.0+3901+4b80ecd7 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | crit ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu RHEL 8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | criu almalinux 8 | 3.18-5.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | criu ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu rocky 8 | 0:3.18-5.module+el8.10.0+1880+8e896d1b | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | criu-devel RHEL 8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | criu-devel almalinux 8 | 3.18-5.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | criu-devel ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | criu-libs RHEL 8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | criu-libs almalinux 8 | 3.18-5.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | criu-libs ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | crun RHEL 8 | 0:1.14.3-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | crun almalinux 8 | 1.14.3-2.module_el8.10.0+3845+87b84552 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | crun ol 8 | 0:1.14.3-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | crun rocky 8 | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.13-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | fuse-overlayfs almalinux 8 | 1.13-1.module_el8.10.0+4047+545787c4 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | fuse-overlayfs ol 8 | 0:1.13-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | fuse-overlayfs rocky 8 | 0:1.13-1.module+el8.10.0+1896+b18fa106 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | govulncheck-vulndb opensuse-leap 16.0 | 0.0.20260723T184607-160000.1.1 | [OPENSUSE-SU-2026:21483-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21483-1.md) | Jul 30, 2026 |
| Linux | libslirp RHEL 8 | 0:4.4.0-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | libslirp almalinux 8 | 4.4.0-2.module_el8.10.0+4023+db236c53 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | libslirp ol 8 | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | libslirp rocky 8 | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | libslirp-devel RHEL 8 | 0:4.4.0-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | libslirp-devel almalinux 8 | 4.4.0-2.module_el8.10.0+3970+8445edf6 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | libslirp-devel ol 8 | 0:4.4.0-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | netavark RHEL 8 | 2:1.10.3-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | netavark almalinux 8 | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | netavark ol 8 | 2:1.10.3-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | netavark rocky 8 | 2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.10-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | oci-seccomp-bpf-hook almalinux 8 | 1.2.10-1.module_el8.10.0+4068+0e21408f | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.10-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | oci-seccomp-bpf-hook rocky 8 | 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | podman RHEL 10 | 5.4.0-14.el10_0 | [RHSA-2025:23347](https://patchblox.com/security/data/fix/linux/rhsa-2025-23347.md) | Nov 5, 2025 |
| Linux | podman RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman RHEL 9 | 6:5.6.0-7.el9_7 | [RHSA-2025:21702](https://patchblox.com/security/data/fix/linux/rhsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman almalinux 8 | 4:4.9.4-25.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman almalinux 9 | 6:5.6.0-7.el9_7 | [ALSA-2025:21702](https://patchblox.com/security/data/fix/linux/alsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-21220](https://patchblox.com/security/data/fix/linux/elsa-2025-21220.md) | Dec 2, 2025 |
| Linux | podman ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman ol 9 | 6:5.6.0-7.0.1.el9_7 | [ELSA-2025-21702](https://patchblox.com/security/data/fix/linux/elsa-2025-21702.md) | Nov 25, 2025 |
| Linux | podman opensuse-leap 15.6 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman opensuse-leap 16.0 | 5.4.2-160000.5.1 | [OPENSUSE-SU-2026:21244-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21244-1.md) | Jul 6, 2026 |
| Linux | podman rocky 10 | 7:5.6.0-6.el10_1 | [RLSA-2025:21220](https://patchblox.com/security/data/fix/linux/rlsa-2025-21220.md) | Nov 21, 2025 |
| Linux | podman rocky 8 | 4:4.9.4-23.module+el8.10.0+2064+309a12a4 | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | podman rocky 9 | 6:5.6.0-7.el9_7 | [RLSA-2025:21702](https://patchblox.com/security/data/fix/linux/rlsa-2025-21702.md) | Nov 21, 2025 |
| Linux | podman sles 15.6 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman sles 15.7 | 4.9.5-150500.3.56.2 | [SUSE-SU-2025:4081-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4081-1.md) | Nov 12, 2025 |
| Linux | podman sles 16.0 | 5.4.2-160000.4.1 | [SUSE-SU-2026:20626-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-20626-1.md) | Mar 3, 2026 |
| Linux | podman-catatonit RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-catatonit almalinux 8 | 4:4.9.4-25.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-catatonit ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-docker RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-docker RHEL 9 | 6:5.6.0-7.el9_7 | [RHSA-2025:21702](https://patchblox.com/security/data/fix/linux/rhsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-docker almalinux 10 | 7:5.6.0-6.el10_1 | [ALSA-2025:21220](https://patchblox.com/security/data/fix/linux/alsa-2025-21220.md) | Nov 13, 2025 |
| Linux | podman-docker almalinux 8 | 4:4.9.4-25.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-docker almalinux 9 | 6:5.6.0-7.el9_7 | [ALSA-2025:21702](https://patchblox.com/security/data/fix/linux/alsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-docker ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-21220](https://patchblox.com/security/data/fix/linux/elsa-2025-21220.md) | Dec 2, 2025 |
| Linux | podman-docker ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-docker ol 9 | 6:5.6.0-7.0.1.el9_7 | [ELSA-2025-21702](https://patchblox.com/security/data/fix/linux/elsa-2025-21702.md) | Nov 25, 2025 |
| Linux | podman-gvproxy RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-gvproxy almalinux 8 | 4:4.9.4-25.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-gvproxy ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-plugins RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-plugins RHEL 9 | 6:5.6.0-7.el9_7 | [RHSA-2025:21702](https://patchblox.com/security/data/fix/linux/rhsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-plugins almalinux 8 | 4:4.9.4-25.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-plugins almalinux 9 | 6:5.6.0-7.el9_7 | [ALSA-2025:21702](https://patchblox.com/security/data/fix/linux/alsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-plugins ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-plugins ol 9 | 6:5.6.0-7.0.1.el9_7 | [ELSA-2025-21702](https://patchblox.com/security/data/fix/linux/elsa-2025-21702.md) | Nov 25, 2025 |
| Linux | podman-remote RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-remote RHEL 9 | 6:5.6.0-7.el9_7 | [RHSA-2025:21702](https://patchblox.com/security/data/fix/linux/rhsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-remote almalinux 8 | 4:4.9.4-25.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-remote almalinux 9 | 6:5.6.0-7.el9_7 | [ALSA-2025:21702](https://patchblox.com/security/data/fix/linux/alsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-remote ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-21220](https://patchblox.com/security/data/fix/linux/elsa-2025-21220.md) | Dec 2, 2025 |
| Linux | podman-remote ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-remote ol 9 | 6:5.6.0-7.0.1.el9_7 | [ELSA-2025-21702](https://patchblox.com/security/data/fix/linux/elsa-2025-21702.md) | Nov 25, 2025 |
| Linux | podman-tests RHEL 8 | 4:4.9.4-25.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | podman-tests RHEL 9 | 6:5.6.0-7.el9_7 | [RHSA-2025:21702](https://patchblox.com/security/data/fix/linux/rhsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-tests almalinux 8 | 4:4.9.4-25.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | podman-tests almalinux 9 | 6:5.6.0-7.el9_7 | [ALSA-2025:21702](https://patchblox.com/security/data/fix/linux/alsa-2025-21702.md) | Nov 18, 2025 |
| Linux | podman-tests ol 10 | 7:5.6.0-6.0.1.el10_1 | [ELSA-2025-21220](https://patchblox.com/security/data/fix/linux/elsa-2025-21220.md) | Dec 2, 2025 |
| Linux | podman-tests ol 8 | 4:4.9.4-23.0.1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | podman-tests ol 9 | 6:5.6.0-7.0.1.el9_7 | [ELSA-2025-21702](https://patchblox.com/security/data/fix/linux/elsa-2025-21702.md) | Nov 25, 2025 |
| Linux | python-podman rocky 8 | 0:4.9.0-3.module+el8.10.0+2001+6a33db9f | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | python3-criu RHEL 8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | python3-criu almalinux 8 | 3.18-5.module_el8.10.0+3970+8445edf6 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | python3-criu ol 8 | 0:3.18-5.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | python3-podman RHEL 8 | 0:4.9.0-3.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | python3-podman almalinux 8 | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | python3-podman ol 8 | 0:4.9.0-3.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | runc Debian 14 | 1.3.3+ds1-2 | [DEBIAN-CVE-2025-52881](https://patchblox.com/security/data/fix/linux/debian-cve-2025-52881.md) | Nov 6, 2025 |
| Linux | runc RHEL 8 | 4:1.2.9-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | runc RHEL 9 | 4:1.3.0-4.el9_7 | [RHSA-2025:20957](https://patchblox.com/security/data/fix/linux/rhsa-2025-20957.md) | Nov 11, 2025 |
| Linux | runc Ubuntu 22.04.1 LTS (jammy) | 1.3.3-0ubuntu1~22.04.2 | [runc 1.3.3-0ubuntu1~22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-runc-1.3.3-0ubuntu1-22.04.2.md) | Nov 5, 2025 |
| Linux | runc Ubuntu 24.04.5 LTS (noble) | 1.3.3-0ubuntu1~24.04.2 | [runc 1.3.3-0ubuntu1~24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-runc-1.3.3-0ubuntu1-24.04.2.md) | Nov 5, 2025 |
| Linux | runc Ubuntu 25.04 (plucky) | 1.3.3-0ubuntu1~25.04.2 | [runc 1.3.3-0ubuntu1~25.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-runc-1.3.3-0ubuntu1-25.04.2.md) | Jan 16, 2026 |
| Linux | runc Ubuntu 25.10 (questing) | 1.3.3-0ubuntu1~25.10.2 | [runc 1.3.3-0ubuntu1~25.10.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-runc-1.3.3-0ubuntu1-25.10.2.md) | Nov 5, 2025 |
| Linux | runc almalinux 8 | 4:1.2.9-2.module_el8.10.0+4089+ce72bbbe | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | runc almalinux 9 | 4:1.3.0-4.el9_7 | [ALSA-2025:20957](https://patchblox.com/security/data/fix/linux/alsa-2025-20957.md) | Nov 11, 2025 |
| Linux | runc amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc ol 8 | 4:1.2.5-2.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | runc ol 9 | 4:1.2.5-3.el9_6 | [ELSA-2025-19927](https://patchblox.com/security/data/fix/linux/elsa-2025-19927.md) | Nov 7, 2025 |
| Linux | runc opensuse-leap 15.6 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc opensuse-leap 16.0 | 1.3.3-160000.1.1 | [OPENSUSE-SU-2025:20072-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2025-20072-1.md) | Nov 20, 2025 |
| Linux | runc rocky 8 | 4:1.2.5-2.module+el8.10.0+2095+5cd7f3af | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | runc rocky 9 | 4:1.3.0-4.el9_7 | [RLSA-2025:20957](https://patchblox.com/security/data/fix/linux/rlsa-2025-20957.md) | Nov 21, 2025 |
| Linux | runc sles 15.6 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc sles 15.7 | 1.3.3-150000.85.1 | [SUSE-SU-2025:4073-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-4073-1.md) | Nov 12, 2025 |
| Linux | runc sles 16.0 | 1.3.3-160000.1.1 | [SUSE-SU-2025:21136-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-21136-1.md) | Nov 20, 2025 |
| Linux | runc-debuginfo amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc-debugsource amzn 2023 | 1.3.3-2.amzn2023.0.1 | [ALAS2023-2025-1286](https://patchblox.com/security/data/fix/linux/alas2023-2025-1286.md) | Nov 10, 2025 |
| Linux | runc-stable Ubuntu 25.10 (questing) | 1.3.3-0ubuntu1~25.10.2 | [runc-stable 1.3.3-0ubuntu1~25.10.2](https://patchblox.com/security/data/fix/linux/ubuntu-questing-runc-stable-1.3.3-0ubuntu1-25.10.2.md) | Nov 5, 2025 |
| Linux | skopeo RHEL 8 | 2:1.14.5-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | skopeo almalinux 8 | 2:1.14.5-5.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | skopeo ol 8 | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | skopeo rocky 8 | 2:1.14.5-4.module+el8.10.0+2001+6a33db9f | [RLSA-2025:21232](https://patchblox.com/security/data/fix/linux/rlsa-2025-21232.md) | Nov 28, 2025 |
| Linux | skopeo-tests RHEL 8 | 2:1.14.5-5.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | skopeo-tests almalinux 8 | 2:1.14.5-5.module_el8.10.0+4082+f7f0c95e | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | skopeo-tests ol 8 | 2:1.14.5-4.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | slirp4netns RHEL 8 | 0:1.2.3-1.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | slirp4netns almalinux 8 | 1.2.3-1.module_el8.10.0+4047+545787c4 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | slirp4netns ol 8 | 0:1.2.3-1.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | slirp4netns rocky 8 | 0:1.2.3-1.module+el8.10.0+1825+623b0c20 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | toolbox RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | toolbox almalinux 8 | 0.0.99.5-2.module_el8.10.0+3845+87b84552 | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | toolbox rocky 8 | 0:0.0.99.5-2.module+el8.10.0+1880+8e896d1b.rocky.0.2 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |
| Linux | toolbox-tests RHEL 8 | 0:0.0.99.5-2.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | toolbox-tests almalinux 8 | 0.0.99.5-2.module_el8.10.0+3858+6ad51f9f | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | udica RHEL 8 | 0:0.2.6-21.module+el8.10.0+23820+ae6deecc | [RHSA-2025:23543](https://patchblox.com/security/data/fix/linux/rhsa-2025-23543.md) | Jan 16, 2026 |
| Linux | udica almalinux 8 | 0.2.6-21.module_el8.10.0+4068+0e21408f | [ALSA-2025:23543](https://patchblox.com/security/data/fix/linux/alsa-2025-23543.md) | Dec 17, 2025 |
| Linux | udica ol 8 | 0:0.2.6-21.module+el8.10.0+90704+e5ea1250 | [ELSA-2025-21232](https://patchblox.com/security/data/fix/linux/elsa-2025-21232.md) | Nov 17, 2025 |
| Linux | udica rocky 8 | 0:0.2.6-21.module+el8.10.0+1896+b18fa106 | [RLSA-2025:23543](https://patchblox.com/security/data/fix/linux/rlsa-2025-23543.md) | Dec 18, 2025 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.