PT-2022-4807 · Runc+8 · Runc+8
Andrew G. Morgan
·
Published
2022-05-05
·
Updated
2025-09-29
·
CVE-2022-29162
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
runc versions prior to 1.1.2
Description
A bug was found in runc where
runc exec --cap created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set.Recommendations
For versions prior to 1.1.2, update to version 1.1.2 to fix the bug, which changes
runc exec --cap behavior to not include inheritable capabilities and modifies runc spec to not set any inheritable capabilities in the created example OCI spec (config.json) file.Exploit
Fix
DoS
Incorrect Default Permissions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Red Hat
Rocky Linux
Suse
Ubuntu
Runc