CVE-2025-2713
Improper File Permission Handling in Google gVisor runsc
Résumé
Improper File Permission Handling in Google gVisor runsc
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2025-2713 golang-gvisor-gvisor
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com