Privilege escalation in Red Hat Enterprise Linux 10
CVE-2024-11218
A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the host.
Vulnerability class: Privilege Escalation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.004 (27.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 28th percentile — 27.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8 — versions 8100020250124120243.afee755d
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — versions 8060020250203202123.3b538bd8
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service — versions 8060020250203202123.3b538bd8
- Red Hat Enterprise Linux 8.6 Update Services For SAP Solutions — versions 8060020250203202123.3b538bd8
- Red Hat Enterprise Linux 8.8 Extended Update Support — versions 8080020250207173112.0f77c1b7
- Red Hat Enterprise Linux 9 — versions 4:5.2.2-13.el9_5, 2:1.37.6-1.el9_5
- Red Hat Enterprise Linux 9.0 Update Services For SAP Solutions — versions 2:4.2.0-6.el9_0, 1:1.26.9-1.el9_0
- Red Hat Enterprise Linux 9.2 Extended Update Support — versions 1:1.29.5-1.el9_2, 2:4.4.1-22.el9_2
- Red Hat Enterprise Linux 9.4 Extended Update Support — versions 2:1.33.12-2.el9_4, 4:4.9.4-17.el9_4
Weakness classification (CWE)
References
- access.redhat.com/errata/RHSA-2025:0830 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:0878 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:0922 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:0923 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1186 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1187 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1188 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1189 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1207 (vendor-advisory)
- access.redhat.com/errata/RHSA-2025:1275 (vendor-advisory)
Frequently asked questions
- What is CVE-2024-11218?
- CVE-2024-11218 is a high-severity vulnerability in Red Hat Enterprise Linux 10, classified under Improper Privilege Management. CVSS score: 8.6/10. Published 2025-01-22.
- How severe is CVE-2024-11218?
- High severity. CVSS v3 base score is 8.6 out of 10.