CVE-2025-52881: runc: LSM labels can be bypassed with malicious config using dummy procfs files

Overview

Severity
High (CVSS 7.3)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U
Exploit Status
Not Exploited
Patch Tuesday
2025-Nov
Released
2025-11-09
Last Updated
2026-01-13
EPSS Score
0.01% (percentile: 3.3%)

Detection & Weaponization (1 sources)

Maturity: Exploit

  • GitHub PoC: 1 repositories

Affected Products (7)

Other

  • 20659-17086
  • 20364-17086
  • 20624-17084
  • 20713-17084
  • 20769-17086
  • 20794-17084
  • 20660-17084

Revision History

  • 2025-11-09: Information published.
  • 2025-11-21: Information published.
  • 2025-12-07: Information published.
  • 2026-01-03: Information published.
  • 2026-01-08: Information published.
  • 2026-01-13: Information published.