CVE-2025-52565

CVE-2025-52565 is a critical vulnerability in runc versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, affecting the Linux Foundation's runc container runtime. This flaw, similar to CVE-2025-31133, allows an attacker to trick runc into bind-mounting sensitive paths to writable locations within a container due to insufficient checks during the bind-mounting of /dev/pts/$n to /dev/console. With a CVSS score of 7.5 (HIGH), successful exploitation can lead to host denial of service or container escape by providing access to critical host files like /proc/sysrq-trigger or /proc/sys/kernel/core_pattern. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community attention with 7 mentions and 7 media articles, indicating high awareness of its potential impact.