GHSA-7p9f-6x8j-gxxpMediumCVSS 7.4

CRI-O: Maliciously structured checkpoint file can gain arbitrary node access

Published
November 26, 2024
Last Modified
July 2, 2025

🔗 CVE IDs covered (1)

CVE-2024-8676 →

📋 Description

Impact

Patches

1.31.1, 1.30.6, 1.29.8

Workarounds

set enable_criu_support = false

References

Are there any links users can visit to find out more?

🎯 Affected products3

  • go/github.com/cri-o/cri-o:< 1.29.11
  • go/github.com/cri-o/cri-o:>= 1.30.0, < 1.30.8
  • go/github.com/cri-o/cri-o:>= 1.31.0, < 1.31.3

🔗 References (12)