linux

Apr 3, 2026 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Mar 13, 2026 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Apr 2, 2026 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Mar 12, 2026 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Changes in this version

+ func SchedSetaffinity(pid int, buf []byte) error

Nov 27, 2025 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Changes in this version

+ func Dup3(oldfd, newfd, flags int) error

+ func Exec(cmd string, args []string, env []string) error

+ func Getwd() (wd string, err error)

+ func Open(path string, mode int, perm uint32) (fd int, err error)

+ func Openat(dirfd int, path string, mode int, perm uint32) (fd int, err error)

+ func Recvfrom(fd int, p []byte, flags int) (n int, from unix.Sockaddr, err error)

+ func Sendmsg(fd int, p, oob []byte, to unix.Sockaddr, flags int) error

+ func SetMempolicy(mode uint, mask *unix.CPUSet) error

Oct 9, 2025 GO-2025-4096 +2 more

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Sep 5, 2025 GO-2025-4096 +2 more

  GO-2025-4096: Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

  GO-2025-4097: Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc

  GO-2025-4098: Container escape and DDoS due to arbitrary write gadgets and procfs write redirects in github.com/opencontainers/runc

Mar 17, 2026 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Nov 27, 2025 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Nov 5, 2025 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Nov 27, 2025 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Nov 5, 2025 GO-2026-5761

  GO-2026-5761: Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Changes in this version

+ func GetPtyPeer(ptyFd uintptr, unsafePeerPath string, flags int) (*os.File, error)

+ func Readlinkat(dir *os.File, path string) (string, error)