Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.use_passt), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-10 | 1 | Disclosure1 |
| 2026-09-12 | 1 | General1 |
https://nvd.nist.gov/vuln/detail/cve-2026-84042 ^😉 虽然我觉得应该算 AC:L
Post summary
The text merely links to the NVD entry for CVE‑2026‑84042 without providing additional technical or actionable information.
Red Hat discloses a crun escape to host root with no fixed release. CVE-2026-84042 says all crun from 1.29 on is affected; the record's affected list names only Red Hat's own images, and NVD has no version data. No exploitation reported. https://severitydaily.com/crun-cve-2026-84042-libkrun-passt-no-fixed-release-record-names-red-hat-images-only/
Post summary
Red Hat has disclosed CVE‑2026‑84042, a privilege‑escalation flaw in crun (1.29+), with no fix yet and no evidence of in‑the‑wild exploitation.