Description (CNA)
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 1.33.1 |
| Red Hat / Red Hat OpenShift Container Platform 4.17 | unaffected 0:1.30.10-3.rhaos4.17.gitd088fcf.el8 before * |
| Red Hat / Red Hat OpenShift Container Platform 4 | affected |
CWE
CWE-22
References
- https://access.redhat.com/errata/RHSA-2025:1122
- https://access.redhat.com/security/cve/CVE-2025-0750
- https://bugzilla.redhat.com/show_bug.cgi?id=2339405
ADP enrichment
No English description supplied.
No references supplied.