USN-6619-1: runC vulnerability

Reference Links

• https://ubuntu.com/security/CVE-2024-21626
• https://launchpad.net/ubuntu/+source/runc/1.1.7-0ubuntu2.2
• https://launchpad.net/ubuntu/+source/runc/1.1.7-0ubuntu1~22.04.2
• https://launchpad.net/ubuntu/+source/runc/1.1.7-0ubuntu1~20.04.2
• https://ubuntu.com/security/notices/USN-6619-1 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2024-21626

Frequently Asked Questions

• What is the severity of USN-6619-1?

  The severity of USN-6619-1 is considered critical due to the potential for sensitive information disclosure and bypassing container restrictions.

• How do I fix USN-6619-1?

  To fix USN-6619-1, update the runC package to the recommended version corresponding to your Ubuntu release.

• What versions of Ubuntu are affected by USN-6619-1?

  USN-6619-1 affects Ubuntu versions 18.04, 20.04, 22.04, and 23.10.

• What issue does USN-6619-1 address?

  USN-6619-1 addresses a vulnerability in runC that allows improper management of internal file descriptors, which can lead to security issues.

• Who discovered the vulnerability in USN-6619-1?

  The vulnerability addressed by USN-6619-1 was discovered by researcher Rory McNamara.