8 matches found
AZL-106655 CVE-2026-76061 affecting package cri-o 1.30.1-1
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
EUVD-2026-93915
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061 Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061
A flaw in CRI-O 's bind_mount_prefix handling allows a malicious container or local attacker to bypass prefix restrictions. By using a Container Runtime Interface (CRI) hostPath containing an intermediate absolute symlink, an attacker can cause the bind mount source to resolve outside the intende...
CVE-2026-76061
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...
CVE-2026-76061: Improper Link Resolution Before File Access
A flaw was found in CRI-O's bindmountprefix handling. When configured with a non-empty bindmountprefix, a malicious container or local attacker could use a Container Runtime Interface CRI hostPath containing an intermediate absolute symlink. This could cause the bind mount source to resolve outsi...