Bug 2339405 (CVE-2025-0750) - CVE-2025-0750 cri-o: CRI-O Path Traversal in Log Handling Functions Allows Arbitrary Unmounting
Summary: CVE-2025-0750 cri-o: CRI-O Path Traversal in Log Handling Functions Allows Ar...
Keywords:
Status: NEW
Alias: CVE-2025-0750
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2342250 2342252 2342251
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-01-22 05:46 UTC by OSIDB Bzimport
Modified: 2025-02-11 11:40 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:1122 0 None None None 2025-02-11 11:40:21 UTC

Description OSIDB Bzimport 2025-01-22 05:46:07 UTC 
The UnMountPodLogs and LinkContainerLogs functions in CRI-O do not properly validate the emptyDirVolName parameter, making them vulnerable to a path traversal attack. An attacker can exploit this to unmount arbitrary paths on the host system, potentially causing denial of service or compromising system integrity.
Comment 2 errata-xmlrpc 2025-02-11 11:40:21 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2025:1122 https://access.redhat.com/errata/RHSA-2025:1122
Note You need to log in before you can comment on or make changes to this bug.