Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-0750

6.6 MEDIUM

CVSS version: 3.1
Attack vector (AV): LOCAL
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): HIGH

created 6 months, 1 week ago

Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

References

https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
RHSA-2025:1122 x_refsource_REDHAT vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
RHSA-2025:1122 x_refsource_REDHAT vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
RHSA-2025:1122 x_refsource_REDHAT vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
RHSA-2025:1122 x_refsource_REDHAT vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-0750 x_refsource_REDHAT vdb-entry
RHBZ#2339405 issue-tracking x_refsource_REDHAT
RHSA-2025:1122 x_refsource_REDHAT vendor-advisory

Affected products

cri-o

<1.33.1
*

rhcos

Matching in nixpkgs

pkgs.cri-o

Open Container Initiative-based implementation of the Kubernetes Container Runtime Interface

nixos-unstable -
- nixpkgs-unstable 1.34.0

pkgs.cri-o-unwrapped