Red Hat Enterprise Linux crun Privilege Escalation Vulnerability, CVSS 7.8

CERT-Bund published a security advisory identifying a privilege escalation vulnerability in Red Hat Enterprise Linux's crun container runtime component. The vulnerability carries a CVSS Base Score of 7.8 (high severity) and allows a local attacker to elevate their privileges on affected systems. Mitigation measures are available and should be deployed immediately.

Organizations running Red Hat Enterprise Linux versions prior to 9 and 10 must prioritize patching or applying vendor-recommended mitigations. Given that this is a local privilege escalation vulnerability rather than remote, the immediate risk is to multi-user systems where untrusted local users may have access. Security teams should treat this as a priority update in their patch management workflows.