Executive brief
CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o
Affected products
- Go github.com/cri-o/cri-o
Junglewise Threat Intelligence
CVE-2023-6476: GO-2024-2458 - CRI-O's pods can break out of resource confinement on cgroupv2 in github.com/cri-o/cri-o
CVE-2023-6476 · Severity: low · CVSS 3.1 · Published 2024-06-28
Technologies: github.com/cri-o/cri-o (Go). Vendors: Go.
Related threats
- GO-2025-3897 - CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o
- GO-2025-3426 - CRI-O Path Traversal vulnerability in github.com/cri-o/cri-o
- GO-2024-3292 - CRI-O: Maliciously structured checkpoint file can gain arbitrary node access in github.com/cri-o/cri-o
- GO-2022-1206 - CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o
- GO-2022-1014 - CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure in github.com/cri-o/cri-o