CVE-2026-41579

Microsoft · Published July 2, 2026

3.3

CVSS v3.1

INFO

Patch availableGet patch

Description

runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations. runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

Affected Products

azl3 runc 1.3.3-2 on Azure Linux 3.0

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N