WITHDRAWN: Libcontainer is affected by capabilities elevation in github.com/opencontainers/runc
(This report has been withdrawn with reason: "Does not affect Go code."). https://nvd.nist.gov/vuln/detail/CVE-2025-27612 lists https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66 which caused automation to flag as Go; the affected repo is https://github.com/youki-dev/youki (Rust).
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27612US | —OT elevated | — | ||
libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in th… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66WEB
- https://github.com/youki-dev/youki/blob/9e63fa4da1672a78ca45100f3059a732784a5174/crates/libcontainer/src/container/tenant_builder.rs#L408WEB
- https://github.com/youki-dev/youki/commit/747e342d2026fbf3a395db3e2a491ebef00082f1FIX
- https://github.com/youki-dev/youki/security/advisories/GHSA-5w4j-f78p-4wh9WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-27612ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan