diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 000753e439..8e081e63cb 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -10,6 +10,9 @@
 # Keep versions on both arches in sync.
 =app-containers/cri-tools-1.32.0 ~arm64
 
+# Needed to address CVE-2025-24965.
+=app-containers/crun-1.20 ~amd64 ~arm64
+
 # Seems to be the only available ebuild in portage-stable right now.
 =app-crypt/adcli-0.9.2 ~arm64