CVE-2026-30892
Fixed in a distro release EPSS <1%
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
Products: containers crun
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | crun | 1.27-1.el10_1 |
| AlmaLinux 10 | crun | 1.27-2.el10_2 |
| AlmaLinux 10 | crun-krun | 1.27-2.el10_2 |
| AlmaLinux 9 | crun | 1.27-1.el9_8 |
| AlmaLinux 9 | crun | 1.27-1.el9_7 |
| Debian 13 | crun | no fix |
| Debian 14 | crun | 1.27-1 |
| Red Hat Enterprise Linux 10.1 | crun | 0:1.27-1.el10_1 |
| Red Hat Enterprise Linux 10.1 | crun-debuginfo | 0:1.27-1.el10_1 |
| Red Hat Enterprise Linux 10.1 | crun-debugsource | 0:1.27-1.el10_1 |
| Red Hat Enterprise Linux 10.2 | crun | 0:1.27-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | crun-debuginfo | 0:1.27-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | crun-debugsource | 0:1.27-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | crun-krun | 0:1.27-2.el10_2 |
| Red Hat Enterprise Linux 9 | crun | 0:1.27-1.el9_7 |
| Red Hat Enterprise Linux 9 | crun | 0:1.27-1.el9_8 |
| Red Hat Enterprise Linux 9 | crun-debuginfo | 0:1.27-1.el9_8 |
| Red Hat Enterprise Linux 9 | crun-debuginfo | 0:1.27-1.el9_7 |
| Red Hat Enterprise Linux 9 | crun-debugsource | 0:1.27-1.el9_8 |
| Red Hat Enterprise Linux 9 | crun-debugsource | 0:1.27-1.el9_7 |
| Red Hat Enterprise Linux eus 10.0 | container-selinux | 4:2.246.0-1.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | crun | 0:1.27.1-1.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | crun-debuginfo | 0:1.27.1-1.el10_0 |
| Red Hat Enterprise Linux eus 10.0 | crun-debugsource | 0:1.27.1-1.el10_0 |
| Red Hat rhel eus 9.6 | crun | 0:1.27-1.el9_6 |
| Red Hat rhel eus 9.6 | crun-debuginfo | 0:1.27-1.el9_6 |
| Red Hat rhel eus 9.6 | crun-debugsource | 0:1.27-1.el9_6 |
| Rocky Linux 10 | crun | 0:1.27-1.el10_1 |
| Rocky Linux 10 | crun | 0:1.27-2.el10_2 |
| Rocky Linux 9 | crun | 0:1.27-1.el9_7 |
| Ubuntu 20.04 LTS | crun | no fix |
| Ubuntu 22.04 LTS | crun | no fix |
| Ubuntu 24.04 LTS | crun | no fix |
| Ubuntu 25.10 | crun | no fix |
| Ubuntu 26.04 LTS | crun | no fix |
| Ubuntu 26.10 | crun | no fix |
| openSUSE Tumbleweed | crun | 1.27-1.1 |