VDB
CGA-mcq5-95p2-hj5c
CGA-mcq5-95p2-hj5c
REJECTED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | kubectl-fips-1.29 | 0, 0, 0 |
| Chainguard | kube-apiserver-fips-1.29 | 0, 0, 0 |
| Chainguard | kube-proxy-fips-1.29 | 0, 0, 0 |
| Chainguard | kubeadm-fips-1.29-default | 0, 0, 0 |
| Chainguard | kubectl-fips-1.29-default | 0, 0, 0 |
| Chainguard | kube-proxy-fips-1.29-default | 0, 0, 0 |
| Chainguard | kube-controller-manager-fips-1.29 | 0, 0, 0 |
| Chainguard | kube-scheduler-fips-1.29-default | 0, 0, 0 |
| Chainguard | kubelet-fips-1.29-default | 0, 0, 0 |
| Chainguard | kube-controller-manager-fips-1.29-default | 0, 0, 0 |
| Chainguard | kube-scheduler-fips-1.29 | 0, 0, 0 |
| Chainguard | kube-apiserver-fips-1.29-default | 0, 0, 0 |
| Chainguard | kubernetes-fips-1.29 | 0, 0, 0 |
| Chainguard | kubectl-bash-completion-fips-1.29 | 0, 0, 0 |
| Chainguard | kubelet-fips-1.29 | 0, 0, 0 |
| Chainguard | kubeadm-fips-1.29 | 0, 0, 0 |
| Chainguard | kubernetes-fips-1.29-default | 0, 0, 0 |
Exploit Intelligence
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc-repo)
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc)
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc-repo)
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc)
- POC (github-poc-repo)
- Root cuase & Proof Of Code (github-poc-repo)
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc-repo)
- POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133 (github-poc-repo)
- PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to /proc/self/fd/7 (github-poc)
- POCs and Tetragon Rules for CVE-2024-21626 and CVE-2025-31133 (github-poc)
…and 31 more exploits
Timeline
- Jan 28, 2026 CVE Rejected