CVE-2025-0750
Fixed in a distro release EPSS <1%CVSS 6.6
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Products: Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/cri-o/cri-o | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat openshift 4.17 | cri-o | 0:1.30.10-3.rhaos4.17.gitd088fcf.el8 |
| Red Hat openshift 4.17 | cri-o | 0:1.30.10-3.rhaos4.17.gitd088fcf.el9 |
| Red Hat openshift 4.17 | cri-o-debuginfo | 0:1.30.10-3.rhaos4.17.gitd088fcf.el8 |
| Red Hat openshift 4.17 | cri-o-debuginfo | 0:1.30.10-3.rhaos4.17.gitd088fcf.el9 |
| Red Hat openshift 4.17 | cri-o-debugsource | 0:1.30.10-3.rhaos4.17.gitd088fcf.el8 |
| Red Hat openshift 4.17 | cri-o-debugsource | 0:1.30.10-3.rhaos4.17.gitd088fcf.el9 |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20250207T224745-150000.1.32.1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250130T185858-1.1 |