CVSS 3.1
4.2 mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:LCVE-2022-0532
An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:cri-o
- redhat:openshift_container_platform
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jqmc-79gx-7g8p | Go | github.com/cri-o/cri-o | <1.23.1 | 1.23.1 |
| GO-2022-0608 | Go | github.com/cri-o/cri-o | <1.23.1 | 1.23.1 |