• Security

[Report] Mitigation complete for runc vulnerabilities

Three high-severity vulnerabilities were reported in the container runtime runc. PFCP has already upgraded all Kubernetes clusters to a fixed version.

For details on the vulnerabilities, please refer to the links below.

• runc version: 1.3.0 -> 1.3.3
• runc release notes: https://github.com/opencontainers/runc/releases/tag/v1.3.3
• CVE IDs
  • CVE-2025-31133 (CVSS v4: 7.3): https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2
  • CVE-2025-52881 (CVSS v4: 7.3): https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm
  • CVE-2025-52565 (CVSS v4: 7.3): https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r

• News >
• [Report] Mitigation complete for runc vulnerabilities