CVE catalog

CVE-2025-31133

runC vulnerabilities

Severity: High · CVSS 8.2CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Published: Nov 4, 2025, 3:36:31 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.24% · Oct 25, 2026

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount (i.e., the container's /dev/null) was actually a real /dev/null inode when using the container's /dev/null to mask. This exposes two methods of attack: an arbitrary mount gadget, leading to host information disclosure, host denial of service, container escape, or a bypassing of maskedPaths. This issue is fixed in versions 1.2.8, 1.3.3 and 1.4.0-rc.3.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	runc	sid	`1.3.6+ds1-1`	fixed
Debian	runc	forky	`1.3.6+ds1-1`	fixed
Debian	runc	trixie	`1.1.15+ds1-2`	vulnerable
Debian	runc	bookworm	`1.1.5+ds1-1+deb12u1`	vulnerable
Debian	runc	bookworm-security	`1.1.5+ds1-1+deb12u1`	vulnerable
Ubuntu	runc	noble	Not reported	vulnerable
Ubuntu	runc-app	noble	`1.3.3-0ubuntu1~24.04.2`	fixed
Ubuntu	runc	noble	`1.3.3-0ubuntu1~24.04.2`	fixed
Cpe	runc	Not reported	Not reported	unknown
Suse	runc	linux enterprise micro 5.3	`1.3.6-150000.101.1`	fixed
Suse	runc	linux enterprise micro 5.4	`1.3.6-150000.101.1`	fixed
Suse	runc	linux enterprise micro 5.5	`1.3.6-150000.101.1`	fixed
Suse	runc	linux enterprise module for basesystem 15 sp7	`1.3.6-150000.101.1`	fixed
Suse	runc	enterprise storage 7.1	`1.3.6-150000.101.1`	fixed
Suse	runc	linux enterprise server ltss extended security 12 sp5	`1.3.6-16.76.1`	fixed
Suse	runc	linux enterprise server 16.0	`1.3.6-160000.1.1`	fixed
Suse	runc	linux enterprise server for sap applications 16.0	`1.3.6-160000.1.1`	fixed
Suse	runc	linux micro 6.2	`1.3.6-160000.1.1`	fixed
Opensuse	runc	leap 16.0	`1.3.6-160000.1.1`	fixed
Opensuse	alloy	leap 16.0	`1.12.2-160000.1.1`	fixed
Opensuse	buildah	leap 16.0	`1.39.5-160000.1.1`	fixed
Opensuse	podman	leap 16.0	`5.4.2-160000.3.1`	fixed
Opensuse	alloy	tumbleweed	`1.12.2-2.1`	fixed
Opensuse	runc	leap 16.0	`1.3.3-160000.1.1`	fixed
Opensuse	runc	tumbleweed	`1.3.3-1.1`	fixed
Suse	alloy	linux enterprise server 16.0	`1.12.2-160000.1.1`	fixed
Suse	alloy	linux enterprise server for sap applications 16.0	`1.12.2-160000.1.1`	fixed
Suse	podman	linux micro 6.2	`5.4.2-160000.3.1`	fixed
Suse	podman	linux enterprise server 16.0	`5.4.2-160000.3.1`	fixed
Suse	podman	linux enterprise server for sap applications 16.0	`5.4.2-160000.3.1`	fixed
Suse	alloy	linux enterprise module for basesystem 15 sp7	`1.12.2-150700.15.15.1`	fixed
Suse	buildah	linux enterprise server 16.0	`1.39.5-160000.1.1`	fixed
Suse	buildah	linux enterprise server for sap applications 16.0	`1.39.5-160000.1.1`	fixed
Suse	runc	linux enterprise server 12 sp5-ltss	`1.3.3-16.70.1`	fixed
Suse	runc	linux enterprise server ltss extended security 12 sp5	`1.3.3-16.70.1`	fixed
Suse	runc	linux enterprise micro 5.3	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise micro 5.4	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise micro 5.5	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise module for basesystem 15 sp7	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise module for containers 15 sp6	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise micro 5.2	`1.3.3-150000.85.1`	fixed
Suse	runc	enterprise storage 7.1	`1.3.3-150000.85.1`	fixed
Opensuse	runc	leap 15.6	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server 12 sp5-ltss	`1.2.7-16.67.1`	fixed
Suse	runc	linux enterprise server ltss extended security 12 sp5	`1.2.7-16.67.1`	fixed
Suse	runc	linux enterprise micro 5.3	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise micro 5.4	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise micro 5.5	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise module for basesystem 15 sp7	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise module for containers 15 sp6	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp3-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp4-espos	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp4-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp5-espos	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp5-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server 15 sp3-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server 15 sp4-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server 15 sp5-ltss	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp3	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp4	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp5	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise micro 5.2	`1.2.7-150000.80.1`	fixed
Suse	runc	enterprise storage 7.1	`1.2.7-150000.80.1`	fixed
Opensuse	runc	leap 15.6	`1.2.7-150000.80.1`	fixed
Suse	runc	linux enterprise server 16.0	`1.3.3-160000.1.1`	fixed
Suse	runc	linux enterprise server for sap applications 16.0	`1.3.3-160000.1.1`	fixed
Suse	runc	linux micro 6.0	`1.3.3-1.1`	fixed
Suse	runc	linux micro 6.2	`1.3.3-160000.1.1`	fixed
Suse	runc	linux micro 6.1	`1.3.3-slfo.1.1_1.1`	fixed
Suse	podman	linux micro 6.0	`4.9.5-9.1`	fixed
Ubuntu	runc-app	22.04	`1.1.12-0ubuntu2~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.2.5-0ubuntu1~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.3.0-0ubuntu2~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.3.3-0ubuntu1~22.04.2`	fixed
Ubuntu	runc-app	24.04	`1.1.10-0ubuntu1`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu1`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu2`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu3`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu3.1`	vulnerable
Ubuntu	runc-app	24.04	`1.2.5-0ubuntu1~24.04.1`	vulnerable
Ubuntu	runc-app	24.04	`1.3.0-0ubuntu2~24.04.1`	vulnerable
Ubuntu	runc-app	24.04	`1.3.3-0ubuntu1~24.04.2`	fixed
Ubuntu	runc-app	25.10	`1.2.5-0ubuntu1`	vulnerable
Ubuntu	runc-app	25.10	`1.3.0-0ubuntu1`	vulnerable
Ubuntu	runc-app	25.10	`1.3.0-0ubuntu2`	vulnerable
Ubuntu	runc-app	25.10	`1.3.3-0ubuntu1~25.10.2`	fixed
Ubuntu	runc-stable	25.10	`1.3.0-0ubuntu1`	vulnerable
Ubuntu	runc-stable	25.10	`1.3.3-0ubuntu1~25.10.2`	fixed
Suse	podman	linux enterprise micro 5.3	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise micro 5.4	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise high performance computing 15 sp4-espos	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise high performance computing 15 sp4-ltss	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise server 15 sp4-ltss	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise server for sap applications 15 sp4	`4.9.5-150400.4.59.2`	fixed
Suse	podman	linux enterprise high performance computing 15 sp3-ltss	`4.9.5-150300.9.63.2`	fixed
Suse	podman	linux enterprise server 15 sp3-ltss	`4.9.5-150300.9.63.2`	fixed
Suse	podman	linux enterprise server for sap applications 15 sp3	`4.9.5-150300.9.63.2`	fixed
Suse	podman	linux enterprise micro 5.1	`4.9.5-150300.9.63.2`	fixed
Suse	podman	linux enterprise micro 5.2	`4.9.5-150300.9.63.2`	fixed
Suse	podman	enterprise storage 7.1	`4.9.5-150300.9.63.2`	fixed
Suse	podman	linux enterprise micro 5.5	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise module for containers 15 sp6	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise module for containers 15 sp7	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise high performance computing 15 sp5-espos	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise high performance computing 15 sp5-ltss	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise server 15 sp5-ltss	`4.9.5-150500.3.56.2`	fixed
Suse	podman	linux enterprise server for sap applications 15 sp5	`4.9.5-150500.3.56.2`	fixed
Opensuse	podman	leap 15.6	`4.9.5-150500.3.56.2`	fixed
Suse	runc	linux enterprise high performance computing 15 sp3-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp4-espos	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp4-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp5-espos	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise high performance computing 15 sp5-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server 15 sp3-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server 15 sp4-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server 15 sp5-ltss	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp3	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp4	`1.3.3-150000.85.1`	fixed
Suse	runc	linux enterprise server for sap applications 15 sp5	`1.3.3-150000.85.1`	fixed
Ubuntu	runc	pro	`1.0.0~rc2+docker1.13.1-0ubuntu1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc4+dfsg1-2`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc4+dfsg1-6`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc4+dfsg1-6ubuntu0.18.04.1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc7+git20190403.029124da-0ubuntu1~18.04.2+esm1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc10-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc10-0ubuntu1~18.04.2`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc93-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc93-0ubuntu1~18.04.2`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc95-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.0.0~rc95-0ubuntu1~18.04.2`	vulnerable
Ubuntu	runc	pro	`1.0.1-0ubuntu2~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.1.0-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.1.4-0ubuntu1~18.04.1`	vulnerable
Ubuntu	runc	pro	`1.1.4-0ubuntu1~18.04.2`	vulnerable
Ubuntu	runc	pro	`1.1.4-0ubuntu1~18.04.2+esm1`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc8+git20190923.3e425f80-0ubuntu1`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc10-0ubuntu1`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc93-0ubuntu1~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc93-0ubuntu1~20.04.2`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc95-0ubuntu1~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.0.0~rc95-0ubuntu1~20.04.2`	vulnerable
Ubuntu	runc	20.04	`1.0.1-0ubuntu2~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.1.0-0ubuntu1~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.1.0-0ubuntu1~20.04.2`	vulnerable
Ubuntu	runc	20.04	`1.1.4-0ubuntu1~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.1.4-0ubuntu1~20.04.2`	vulnerable
Ubuntu	runc	20.04	`1.1.4-0ubuntu1~20.04.3`	vulnerable
Ubuntu	runc	20.04	`1.1.7-0ubuntu1~20.04.1`	vulnerable
Ubuntu	runc	20.04	`1.1.7-0ubuntu1~20.04.2`	vulnerable
Ubuntu	runc	20.04	`1.1.7-0ubuntu1~20.04.4`	vulnerable
Ubuntu	runc	20.04	`1.1.7-0ubuntu1~20.04.5`	vulnerable
Ubuntu	runc-app	20.04	`1.1.12-0ubuntu2~20.04.1`	vulnerable
Ubuntu	runc	22.04	`1.0.1-0ubuntu2`	vulnerable
Ubuntu	runc	22.04	`1.0.1-0ubuntu3`	vulnerable
Ubuntu	runc	22.04	`1.0.3-0ubuntu1`	vulnerable
Ubuntu	runc	22.04	`1.1.0-0ubuntu1`	vulnerable
Ubuntu	runc	22.04	`1.1.0-0ubuntu1.1`	vulnerable
Ubuntu	runc	22.04	`1.1.4-0ubuntu1~22.04.1`	vulnerable
Ubuntu	runc	22.04	`1.1.4-0ubuntu1~22.04.2`	vulnerable
Ubuntu	runc	22.04	`1.1.4-0ubuntu1~22.04.3`	vulnerable
Ubuntu	runc	22.04	`1.1.7-0ubuntu1~22.04.1`	vulnerable
Ubuntu	runc	22.04	`1.1.7-0ubuntu1~22.04.2`	vulnerable
Ubuntu	runc	22.04	`1.1.7-0ubuntu1~22.04.4`	vulnerable
Ubuntu	runc	22.04	`1.1.7-0ubuntu1~22.04.5`	vulnerable
Ubuntu	runc	22.04	`1.1.7-0ubuntu1~22.04.6`	vulnerable
Ubuntu	runc-app	22.04	`1.1.12-0ubuntu2~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.2.5-0ubuntu1~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.3.0-0ubuntu2~22.04.1`	vulnerable
Ubuntu	runc-app	22.04	`1.3.3-0ubuntu1~22.04.2`	fixed
Ubuntu	runc	24.04	`1.1.7-0ubuntu2`	vulnerable
Ubuntu	runc	24.04	`1.1.10+ds1-1ubuntu1`	vulnerable
Ubuntu	runc	24.04	`1.1.10+ds1-1ubuntu2`	vulnerable
Ubuntu	runc	24.04	`1.1.12+ds1-1ubuntu1`	vulnerable
Ubuntu	runc	24.04	`1.1.12+ds1-2ubuntu1`	vulnerable
Ubuntu	runc	24.04	`1.1.12+ds1-2ubuntu1.1`	vulnerable
Ubuntu	runc	24.04	`1.1.12+ds1-2ubuntu1.2`	vulnerable
Ubuntu	runc	24.04	`1.1.12+ds1-2ubuntu1.3`	vulnerable
Ubuntu	runc-app	24.04	`1.1.10-0ubuntu1`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu1`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu2`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu3`	vulnerable
Ubuntu	runc-app	24.04	`1.1.12-0ubuntu3.1`	vulnerable
Ubuntu	runc-app	24.04	`1.2.5-0ubuntu1~24.04.1`	vulnerable
Ubuntu	runc-app	24.04	`1.3.0-0ubuntu2~24.04.1`	vulnerable
Ubuntu	runc-app	24.04	`1.3.3-0ubuntu1~24.04.2`	fixed
Ubuntu	runc	25.10	`1.1.15+ds1-2ubuntu1`	vulnerable
Ubuntu	runc-app	25.10	`1.2.5-0ubuntu1`	vulnerable
Ubuntu	runc-app	25.10	`1.3.0-0ubuntu1`	vulnerable
Ubuntu	runc-app	25.10	`1.3.0-0ubuntu2`	vulnerable
Ubuntu	runc-app	25.10	`1.3.3-0ubuntu1~25.10.2`	fixed
Ubuntu	runc-stable	25.10	`1.3.0-0ubuntu1`	vulnerable
Ubuntu	runc-stable	25.10	`1.3.3-0ubuntu1~25.10.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	runc	source	sid	`1.3.3+ds1-2`	not yet assigned	Not reported	[1120140]
Debian	runc	source	forky	`1.3.3+ds1-2`	not yet assigned	Not reported	[1120140]
Debian	runc	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1120140]
Debian	runc	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1120140]
Ubuntu	runc-app	deb	noble	`1.3.3-0ubuntu1~24.04.2`	Not reported	Not reported	Not reported
Ubuntu	runc	deb	noble	`1.3.3-0ubuntu1~24.04.2`	Not reported	Not reported	Not reported
Suse	runc	rpm	linux enterprise micro 5.3	`1.3.6-150000.101.1`	Not reported	SUSE-SU-2026:3433-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.4	`1.3.6-150000.101.1`	Not reported	SUSE-SU-2026:3433-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.5	`1.3.6-150000.101.1`	Not reported	SUSE-SU-2026:3433-1	Not reported
Suse	runc	rpm	linux enterprise module for basesystem 15 sp7	`1.3.6-150000.101.1`	Not reported	SUSE-SU-2026:3433-1	Not reported
Suse	runc	rpm	enterprise storage 7.1	`1.3.6-150000.101.1`	Not reported	SUSE-SU-2026:3433-1	Not reported
Suse	runc	rpm	linux enterprise server ltss extended security 12 sp5	`1.3.6-16.76.1`	Not reported	SUSE-SU-2026:3428-1	Not reported
Suse	runc	rpm	linux enterprise server 16.0	`1.3.6-160000.1.1`	Not reported	SUSE-SU-2026:22942-1	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 16.0	`1.3.6-160000.1.1`	Not reported	SUSE-SU-2026:22942-1	Not reported
Suse	runc	rpm	linux micro 6.2	`1.3.6-160000.1.1`	Not reported	SUSE-SU-2026:22938-1	Not reported
Opensuse	runc	rpm	leap 16.0	`1.3.6-160000.1.1`	Not reported	OPENSUSE-SU-2026:21431-1	Not reported
Opensuse	alloy	rpm	leap 16.0	`1.12.2-160000.1.1`	Not reported	OPENSUSE-SU-2026:20140-1	Not reported
Opensuse	buildah	rpm	leap 16.0	`1.39.5-160000.1.1`	Not reported	OPENSUSE-SU-2026:20080-1	Not reported
Opensuse	podman	rpm	leap 16.0	`5.4.2-160000.3.1`	Not reported	OPENSUSE-SU-2026:20072-1	Not reported
Opensuse	alloy	rpm	tumbleweed	`1.12.2-2.1`	Not reported	OPENSUSE-SU-2026:10073-1	Not reported
Opensuse	runc	rpm	leap 16.0	`1.3.3-160000.1.1`	Not reported	OPENSUSE-SU-2025:20072-1	Not reported
Opensuse	runc	rpm	tumbleweed	`1.3.3-1.1`	Not reported	OPENSUSE-SU-2025:15705-1	Not reported
Suse	alloy	rpm	linux enterprise server 16.0	`1.12.2-160000.1.1`	Not reported	SUSE-SU-2026:20214-1	Not reported
Suse	alloy	rpm	linux enterprise server for sap applications 16.0	`1.12.2-160000.1.1`	Not reported	SUSE-SU-2026:20214-1	Not reported
Suse	podman	rpm	linux micro 6.2	`5.4.2-160000.3.1`	Not reported	SUSE-SU-2026:20116-1	Not reported
Suse	podman	rpm	linux enterprise server 16.0	`5.4.2-160000.3.1`	Not reported	SUSE-SU-2026:20103-1	Not reported
Suse	podman	rpm	linux enterprise server for sap applications 16.0	`5.4.2-160000.3.1`	Not reported	SUSE-SU-2026:20103-1	Not reported
Suse	alloy	rpm	linux enterprise module for basesystem 15 sp7	`1.12.2-150700.15.15.1`	Not reported	SUSE-SU-2026:0327-1	Not reported
Suse	buildah	rpm	linux enterprise server 16.0	`1.39.5-160000.1.1`	Not reported	SUSE-SU-2026:20123-1	Not reported
Suse	buildah	rpm	linux enterprise server for sap applications 16.0	`1.39.5-160000.1.1`	Not reported	SUSE-SU-2026:20123-1	Not reported
Suse	runc	rpm	linux enterprise server 12 sp5-ltss	`1.3.3-16.70.1`	Not reported	SUSE-SU-2025:4077-1	Not reported
Suse	runc	rpm	linux enterprise server ltss extended security 12 sp5	`1.3.3-16.70.1`	Not reported	SUSE-SU-2025:4077-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.3	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.4	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.5	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise module for basesystem 15 sp7	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise module for containers 15 sp6	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.2	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	enterprise storage 7.1	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Opensuse	runc	rpm	leap 15.6	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-1	Not reported
Suse	runc	rpm	linux enterprise server 12 sp5-ltss	`1.2.7-16.67.1`	Not reported	SUSE-SU-2025:3951-1	Not reported
Suse	runc	rpm	linux enterprise server ltss extended security 12 sp5	`1.2.7-16.67.1`	Not reported	SUSE-SU-2025:3951-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.3	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.4	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.5	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise module for basesystem 15 sp7	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise module for containers 15 sp6	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp4-espos	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp5-espos	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server 15 sp3-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server 15 sp4-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server 15 sp5-ltss	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp3	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp4	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp5	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise micro 5.2	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	enterprise storage 7.1	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Opensuse	runc	rpm	leap 15.6	`1.2.7-150000.80.1`	Not reported	SUSE-SU-2025:3950-1	Not reported
Suse	runc	rpm	linux enterprise server 16.0	`1.3.3-160000.1.1`	Not reported	SUSE-SU-2025:21136-1	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 16.0	`1.3.3-160000.1.1`	Not reported	SUSE-SU-2025:21136-1	Not reported
Suse	runc	rpm	linux micro 6.0	`1.3.3-1.1`	Not reported	SUSE-SU-2025:21036-1	Not reported
Suse	runc	rpm	linux micro 6.2	`1.3.3-160000.1.1`	Not reported	SUSE-SU-2025:21072-1	Not reported
Suse	runc	rpm	linux micro 6.1	`1.3.3-slfo.1.1_1.1`	Not reported	SUSE-SU-2025:21054-1	Not reported
Suse	podman	rpm	linux micro 6.0	`4.9.5-9.1`	Not reported	SUSE-SU-2025:21038-1	Not reported
Ubuntu	runc-app	deb	22.04	`1.3.3-0ubuntu1~22.04.2`	Not reported	USN-7851-1	Not reported
Ubuntu	runc-app	deb	24.04	`1.3.3-0ubuntu1~24.04.2`	Not reported	USN-7851-1	Not reported
Ubuntu	runc-app	deb	25.10	`1.3.3-0ubuntu1~25.10.2`	Not reported	USN-7851-1	Not reported
Ubuntu	runc-stable	deb	25.10	`1.3.3-0ubuntu1~25.10.2`	Not reported	USN-7851-1	Not reported
Suse	podman	rpm	linux enterprise micro 5.3	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise micro 5.4	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise high performance computing 15 sp4-espos	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise high performance computing 15 sp4-ltss	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise server 15 sp4-ltss	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise server for sap applications 15 sp4	`4.9.5-150400.4.59.2`	Not reported	SUSE-SU-2025:4079-1	Not reported
Suse	podman	rpm	linux enterprise high performance computing 15 sp3-ltss	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	linux enterprise server 15 sp3-ltss	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	linux enterprise server for sap applications 15 sp3	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	linux enterprise micro 5.1	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	linux enterprise micro 5.2	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	enterprise storage 7.1	`4.9.5-150300.9.63.2`	Not reported	SUSE-SU-2025:4080-1	Not reported
Suse	podman	rpm	linux enterprise micro 5.5	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise module for containers 15 sp6	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise module for containers 15 sp7	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise high performance computing 15 sp5-espos	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise high performance computing 15 sp5-ltss	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise server 15 sp5-ltss	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	podman	rpm	linux enterprise server for sap applications 15 sp5	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Opensuse	podman	rpm	leap 15.6	`4.9.5-150500.3.56.2`	Not reported	SUSE-SU-2025:4081-1	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp3-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp4-espos	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp4-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp5-espos	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise high performance computing 15 sp5-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server 15 sp3-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server 15 sp4-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server 15 sp5-ltss	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp3	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp4	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Suse	runc	rpm	linux enterprise server for sap applications 15 sp5	`1.3.3-150000.85.1`	Not reported	SUSE-SU-2025:4073-2	Not reported
Ubuntu	runc-app	deb	22.04	`1.3.3-0ubuntu1~22.04.2`	Not reported	UBUNTU-CVE-2025-31133	Not reported
Ubuntu	runc-app	deb	24.04	`1.3.3-0ubuntu1~24.04.2`	Not reported	UBUNTU-CVE-2025-31133	Not reported
Ubuntu	runc-app	deb	25.10	`1.3.3-0ubuntu1~25.10.2`	Not reported	UBUNTU-CVE-2025-31133	Not reported
Ubuntu	runc-stable	deb	25.10	`1.3.3-0ubuntu1~25.10.2`	Not reported	UBUNTU-CVE-2025-31133	Not reported

[Debian bug #1120140]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[golang-github-opencontainers-runc-dev]Affected
Source package: [runc]
Details (4)
- 1.1.5+ds1-1+deb12u1 · all · bookworm
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · all · bookworm
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · all · bookworm-security
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · all · bookworm-security
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
[runc]Affected
Details (4)
- 1.1.5+ds1-1+deb12u1 · amd64 · bookworm
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · arm64 · bookworm
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · amd64 · bookworm-security
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12
- 1.1.5+ds1-1+deb12u1 · arm64 · bookworm-security
  Affected
  usn · runc · debian · bookworm; usn · runc · debian · 12

[Debian 13 (Trixie)]

[golang-github-opencontainers-runc-dev]Affected
Source package: [runc]
Details (2)
- 1.1.15+ds1-2 · all · trixie
  Affected
  usn · runc · debian · 13
- 1.1.15+ds1-2 · all · trixie
  Affected
  usn · runc · debian · 13
[runc]Affected
Source package: [runc]
Details (2)
- 1.1.15+ds1-2+b4 · amd64 · trixie
  Affected
  usn · runc · debian · 13
- 1.1.15+ds1-2+b4 · arm64 · trixie
  Affected
  usn · runc · debian · 13

[openSUSE Tumbleweed]

[alloy]Fixed
Source package: [alloy]
Details (1)
- 1.18.0-1.1 · x86_64 · tumbleweed
  Fixed · Fixed: 1.12.2-2.1
  usn · alloy · opensuse · tumbleweed
[runc]Fixed
Source package: [runc]
Details (1)
- 1.4.3-1.2 · x86_64 · tumbleweed
  Fixed · Fixed: 1.3.3-1.1
  usn · runc · opensuse · tumbleweed

Observed: Oct 24, 2026, 4:53:07 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]