UpHeron
All vulnerabilities

Servers and applications

CVE-2025-52881

container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Severity
High 7.3
Published
5 Nov 2025
Last changed
7 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.2.8, 1.3.3
Also known as
GHSA-cgrx-mc8f-2prm
Sources
NVD, Project advisories (GitHub)

Description

runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with shared mounts (we have also verified this attack is possible to exploit using a standard Dockerfile with docker buildx build as that also…

Affected software

SoftwareAffected versions
runcServers and applications · cpe:a:linuxfoundation:runc
  • Every version before 1.2.8
  • From 1.3.0 before 1.3.3
  • Version 1.4.0-rc1
  • Version 1.4.0-rc2
runcServers and applications · github:opencontainers/runc
  • Every version before 1.2.8

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-52881
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-52881
  • GitHub Advisory Database https://github.com/advisories/GHSA-cgrx-mc8f-2prm
  • github.com https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm