Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2024-21626] Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know

wiz.io | blog | CVE-2024-21626 | #kubernetes | #containers | #container-escape | #runc | #cve-2024-21626 | #buildkit

Summary

The 'Leaky Vessels' flaws in runC (CVE-2024-21626) and BuildKit (three CVEs) enable container escapes to the host filesystem, hitting multi-tenant Kubernetes hardest; patching is urged.
Published
Collected

original ↗

Related coverage

  1. A Guide to Container Privilege Escalation Vulnerabilities (aikido.dev)
  2. Our Container Security AMA: You asked, Wiz answered (wiz.io)
  3. Top 9 Docker Container Security Vulnerabilities (aikido.dev)
  4. Digging Into Runtimes – runc (blog.quarkslab.com)
  5. Kubernetes and HostPath, a Love-Hate Relationship (blog.quarkslab.com)
  6. Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra (wiz.io)

back