CVE-2022-0811CWE-94

A flaw was found in CRI-O in the way it set kernel options for a pod

published March 16, 2022

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19046 · 97.3th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2022-03-16T14:03Z
EPSS history
Timeline
  • 16 MAR 14:03Z
    A flaw was found in CRI-O in the way it set kernel options for a pod
    cvelistv5