CVE-2025-52881: runc: LSM labels can be bypassed with malicious config using dummy procfs files
Overview
- Severity
- High (CVSS 7.3)
- CVSS Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U
- Exploit Status
- Not Exploited
- Patch Tuesday
- 2025-Nov
- Released
- 2025-11-09
- Last Updated
- 2026-01-13
- EPSS Score
- 0.01% (percentile: 3.3%)
Detection & Weaponization (1 sources)
Maturity: Exploit
- GitHub PoC: 1 repositories
Affected Products (7)
Other
- 20659-17086
- 20364-17086
- 20624-17084
- 20713-17084
- 20769-17086
- 20794-17084
- 20660-17084
Revision History
- 2025-11-09: Information published.
- 2025-11-21: Information published.
- 2025-12-07: Information published.
- 2026-01-03: Information published.
- 2026-01-08: Information published.
- 2026-01-13: Information published.