GHSA-jqmc-79gx-7g8pMediumCVSS 4.2

Incorrect Permission Assignment for Critical Resource in CRI-O

Published
February 11, 2022
Last Modified
February 3, 2023

🔗 CVE IDs covered (1)

CVE-2022-0532 →

📋 Description

An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.

🎯 Affected products1

  • go/github.com/cri-o/cri-o:< 1.23.1

🔗 References (6)