CVE-2024-21626

CVE-2024-21626 is a critical vulnerability in runc, a CLI tool for Linux container management, affecting versions 1.1.11 and earlier, including those used in Fedora. It stems from an internal file descriptor leak, allowing attackers to gain access to the host filesystem or overwrite host binaries, leading to complete container escapes. With a CVSS score of 8.6 (HIGH) and a FAUCET Risk Score of 93/100, this vulnerability is easily exploitable with low attack complexity and no user interaction required, resulting in high impacts to confidentiality, integrity, and availability. While not yet in the KEV catalog, exploit modules exist (e.g., Metasploit), and it has garnered significant community discussion and media coverage, indicating high awareness and potential for future exploitation.