CVE-2025-31133

This PoC demonstrates a symlink race condition in runc (CVE-2025-31133) by exploiting the maskedPaths feature to modify /proc/sys/kernel/core_pattern. It uses a background process to rapidly replace /dev/null with a symlink to bypass runc's restrictions.

This repository contains a functional exploit PoC for CVE-2025-31133, targeting a symlink race condition in runc's maskedPaths feature. The exploit attempts host code execution by manipulating /proc/sys/kernel/core_pattern via a race condition during container startup.

This repository contains a functional proof-of-concept exploit for CVE-2025-31133, a race condition vulnerability in runc that allows bypassing `maskedPaths` protection, potentially leading to container escape. The exploit leverages a timing window during container initialization to write to protected files like `/proc/sys/kernel/core_pattern`.

This repository contains a working proof-of-concept exploit for CVE-2025-31133, a container escape vulnerability in runc. The exploit leverages eBPF to manipulate the core_pattern handler, achieving privilege escalation from within a container to the host system.