CVE-2023-28642

CVE-2023-28642 is a high-severity vulnerability affecting runc, a CLI tool for container management, where AppArmor security policies can be bypassed. This bypass occurs when the /proc directory within a container is symlinked with a specific mount configuration, potentially allowing an attacker to escape container isolation. The vulnerability has a CVSS score of 7.8, indicating a local attack vector with low complexity, leading to high impacts on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, users are strongly advised to upgrade to runc version 1.1.5 or later, or avoid using untrusted container images.