CVE-2025-2713
Improper File Permission Handling in Google gVisor runsc
Summary
Improper File Permission Handling in Google gVisor runsc
Original description
The description as published by the source.
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2025-2713 golang-gvisor-gvisor
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com