A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2022-03-16T14:03:40
Updated: 2024-08-02T23:40:04.258Z
Reserved: 2022-03-01T00:00:00
Link: CVE-2022-0811
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-16T15:15:16.123
Modified: 2024-11-21T06:39:26.720
Link: CVE-2022-0811
Redhat