CVE-2022-29162

runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container's bounding set. This bug has been fixed in runc 1.1.2. This fix changes `runc exec --cap` behavior such that the additional capabilities granted to the process being executed (as specified via `--cap` arguments) do not include inheritable capabilities. In addition, `runc spec` is changed to not set any inheritable capabilities in the created example OCI spec (`config.json`) file.

• CWE-276

• https://github.com/opencontainers/runc/commit/d04de3a9b72d7a2455c1885fc75eb36d02cd17b5Patch, Third Party Advisory
• https://github.com/opencontainers/runc/releases/tag/v1.1.2Release Notes, Third Party Advisory
• https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVPZBV7ISA7QKRPTC7ZXWKMIQI2HZEBB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D77CKD3AXPMU4PMQIQI5Q74SI4JATNND/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GPQU4YC4AAY54JDXGDQHJEYKSXXG5T2Y/
• https://github.com/opencontainers/runc/commit/d04de3a9b72d7a2455c1885fc75eb36d02cd17b5Patch, Third Party Advisory
• https://github.com/opencontainers/runc/releases/tag/v1.1.2Release Notes, Third Party Advisory
• https://github.com/opencontainers/runc/security/advisories/GHSA-f3fp-gc8g-vw66Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/03/msg00023.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVPZBV7ISA7QKRPTC7ZXWKMIQI2HZEBB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D77CKD3AXPMU4PMQIQI5Q74SI4JATNND/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GPQU4YC4AAY54JDXGDQHJEYKSXXG5T2Y/

Published

May 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-29155In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL …9.8
• CVE-2022-29156drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel b…7.8
• CVE-2022-29158Apache OFBiz up to version 18.12.05 is vulnerable to Regular…7.5
• CVE-2022-29159Nextcloud Deck is a Kanban-style project & personal manageme…4.3
• CVE-2022-29160Nextcloud Android is the Android client for Nextcloud, a sel…3.3
• CVE-2022-29161XWiki Platform is a generic wiki platform offering runtime s…9.8
• CVE-2022-29163Nextcloud Server is the file server software for Nextcloud, …4.3
• CVE-2022-29164Argo Workflows is an open source container-native workflow e…7.1
• CVE-2022-29165Argo CD is a declarative, GitOps continuous delivery tool fo…10
• CVE-2022-29166matrix-appservice-irc is a Node.js IRC bridge for Matrix. Th…8.8
• CVE-2022-29167Hawk is an HTTP authentication scheme providing mechanisms f…7.5
• CVE-2022-29168Wire is a secure messaging application. Wire is vulnerable t…6.1