RHSA-2026:4531 | Mondoo Vulnerability Intelligence

RHSA-2026:4531

HIGH8.2

Red Hat Security Advisory: runc security update

Published Mar 13, 2026

Modified Yesterday

Fix available

Affected Packages

runc

Red Hat rhel_e4s 9.2 appstream

Fixed in:

4:1.2.9-1.el9_2.1

runc-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

4:1.2.9-1.el9_2.1

runc-debugsource

Red Hat rhel_e4s 9.2 appstream

Fixed in:

4:1.2.9-1.el9_2.1

References(31)

https://access.redhat.com/errata/RHSA-2026:4531

https://access.redhat.com/security/cve/CVE-2025-31133

https://access.redhat.com/security/cve/CVE-2025-52565

https://access.redhat.com/security/cve/CVE-2025-52881

https://access.redhat.com/security/cve/CVE-2025-65637

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2404705

https://bugzilla.redhat.com/show_bug.cgi?id=2404708

https://bugzilla.redhat.com/show_bug.cgi?id=2404715

https://bugzilla.redhat.com/show_bug.cgi?id=2418900

https://github.com/mjuanxd/logrus-dos-poc

https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md

https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2

https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm

https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r

https://github.com/opencontainers/selinux/pull/237

https://github.com/sirupsen/logrus/issues/1370

https://github.com/sirupsen/logrus/pull/1376

https://github.com/sirupsen/logrus/releases/tag/v1.8.3

https://github.com/sirupsen/logrus/releases/tag/v1.9.1

https://github.com/sirupsen/logrus/releases/tag/v1.9.3

https://nvd.nist.gov/vuln/detail/CVE-2025-31133

https://nvd.nist.gov/vuln/detail/CVE-2025-52565

https://nvd.nist.gov/vuln/detail/CVE-2025-52881

https://nvd.nist.gov/vuln/detail/CVE-2025-65637

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

RequiredUI:R

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Upstream

CVE-2025-31133 CVE-2025-52565 CVE-2025-52881 CVE-2025-65637

Ecosystems

Red Hat rhel_e4s 9.2 appstream

Timeline

PublishedMar 13, 2026

ModifiedMar 14, 2026