cri-o: Pods are able to break out of resource confinement on cgroupv2

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

CVE-2023-6476

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...

PT-2024-2548

Name of the Vulnerable Software and Affected Versions CRI-O versions prior to 1.29.1 CRI-O versions prior to 1.28.3 CRI-O versions prior to 1.27.3 Description A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specif...

CVE-2023-6476: Allocation of Resources Without Limits or Throttling

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node...