CVE-2023-6476 Cri-o: pods are able to break out of resource confinement on cgroupv2

🗓️ 09 Jan 2024 21:32:03Reported by redhatType

vulnrichment🔗 github.com👁 4 Views

CVE-2023-6476 in CRI-O allows pods to escape resource constraints, risking denial of service.

Reporter	Title	Published	Views	Family All 30
BDU FSTEC	The vulnerability of the CRI-O Container Engine’s application programming interface, a software platform for managing clusters of virtual machines in Kubernetes, relates to the distribution of resources without any restrictions or controls. This allows a malicious actor to trigger service failures.	3 Apr 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-6476 affecting package cri-o for versions less than 1.22.3-10	16 Feb 202516:08	–	cbl_mariner
Circl	CVE-2023-6476	9 Jan 202422:36	–	circl
CNNVD	CRI-O Security Vulnerabilities	9 Jan 202400:00	–	cnnvd
CVE	CVE-2023-6476	9 Jan 202421:32	–	cve
Cvelist	CVE-2023-6476 Cri-o: pods are able to break out of resource confinement on cgroupv2	9 Jan 202421:32	–	cvelist
EUVD	EUVD-2024-0390	3 Oct 202520:07	–	euvd
Github Security Blog	CRI-O's pods can break out of resource confinement on cgroupv2	10 Jan 202415:27	–	github
Microsoft CVE	Cri-o: pods are able to break out of resource confinement on cgroupv2	4 Sep 202504:08	–	mscve
NVD	CVE-2023-6476	9 Jan 202422:15	–	nvd

Source	Link
access	www.access.redhat.com/errata/RHSA-2024:0195
access	www.access.redhat.com/errata/RHSA-2024:0207
access	www.access.redhat.com/security/cve/CVE-2023-6476
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

20 Nov 2025 18:05Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00859

SSVC

cve-2023-6476 cri-o vulnerability container unconfined resource confinement denial of service.