{"id":"CVE-2022-0811","aliases":["ALPINE-CVE-2022-0811","AZL-37070","EUVD-2022-1349","GHSA-6x2m-w449-qwx7","GO-2022-0354","RHSA-2022:0810","RHSA-2022:0860","RHSA-2022:0866","RHSA-2022:0870","RHSA-2022:0871"],"status":"published","title":"Code Injection in CRI-O","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.19046,"percentile":0.97332,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2022-03-15T20:13:38Z","modified":"2026-11-03T07:31:02Z","exploits":[{"source":"pocgithub","id":"spiarh/webhook-cve-2022-0811","title":"spiarh/webhook-cve-2022-0811","date":"2022-03-21","url":"https://github.com/spiarh/webhook-cve-2022-0811"}],"fixes":[{"ecosystem":"Go","package":"github.com/cri-o/cri-o","fixed_in":["1.19.6","1.20.7","1.21.6","1.22.3","1.23.2"],"sources":["ghsa","osv"]},{"ecosystem":"Alpine:v3.21","package":"cri-o","fixed_in":["1.23.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"cri-o","fixed_in":["1.23.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"cri-o","fixed_in":["1.23.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"cri-o","fixed_in":["1.23.2-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"cri-o","fixed_in":["1.22.3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o","fixed_in":["0:1.23.1-12.rhaos4.10.git1607c6e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o-debuginfo","fixed_in":["0:1.23.1-12.rhaos4.10.git1607c6e.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o","fixed_in":["0:1.23.1-12.rhaos4.10.git1607c6e.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debuginfo","fixed_in":["0:1.23.1-12.rhaos4.10.git1607c6e.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debugsource","fixed_in":["0:1.23.1-12.rhaos4.10.git1607c6e.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o","fixed_in":["0:1.22.2-3.rhaos4.9.gitb030be8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o-debuginfo","fixed_in":["0:1.22.2-3.rhaos4.9.gitb030be8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o","fixed_in":["0:1.22.2-3.rhaos4.9.gitb030be8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debuginfo","fixed_in":["0:1.22.2-3.rhaos4.9.gitb030be8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debugsource","fixed_in":["0:1.22.2-3.rhaos4.9.gitb030be8.el8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.19.6"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.20.0"},{"fixed":"1.20.7"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.21.0"},{"fixed":"1.21.6"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.22.0"},{"fixed":"1.22.3"}]}]},{"source":"ghsa","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.23.0"},{"fixed":"1.23.2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.23.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.23.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.23.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.19.0"},{"fixed":"1.23.2-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.22.3-1"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.19.0"},{"fixed":"1.19.6"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.20.0"},{"fixed":"1.20.7"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.21.0"},{"fixed":"1.21.6"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.22.0"},{"fixed":"1.22.3"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.23.0"},{"fixed":"1.23.2"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/cri-o/cri-o","ranges":[{"type":"SEMVER","events":[{"introduced":"1.19.0"},{"fixed":"1.19.6"},{"introduced":"1.20.0"},{"fixed":"1.20.7"},{"introduced":"1.21.0"},{"fixed":"1.21.6"},{"introduced":"1.22.0"},{"fixed":"1.22.3"},{"introduced":"1.23.0"},{"fixed":"1.23.2"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-12.rhaos4.10.git1607c6e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-12.rhaos4.10.git1607c6e.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-12.rhaos4.10.git1607c6e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-12.rhaos4.10.git1607c6e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.10::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23.1-12.rhaos4.10.git1607c6e.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.2-3.rhaos4.9.gitb030be8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.2-3.rhaos4.9.gitb030be8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.2-3.rhaos4.9.gitb030be8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.2-3.rhaos4.9.gitb030be8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.9::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22.2-3.rhaos4.9.gitb030be8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-3.rhaos4.6.git91f8458.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-3.rhaos4.6.git91f8458.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-3.rhaos4.6.git91f8458.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-3.rhaos4.6.git91f8458.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.6::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.5-3.rhaos4.6.git91f8458.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.6-11.rhaos4.7.git76ea3d0.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.6-11.rhaos4.7.git76ea3d0.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.6-11.rhaos4.7.git76ea3d0.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.6-11.rhaos4.7.git76ea3d0.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.7::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.6-11.rhaos4.7.git76ea3d0.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el7"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.5-3.rhaos4.8.gitaf64931.el8"}]}],"bundled":15},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1646993358-1.el8"}]}],"bundled":15}],"products":[{"vendor":"kubernetes","product":"cri-o"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059475","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","web","article"]},{"url":"https://bugs.gentoo.org/835336","tags":["web"]},{"url":"https://www.crowdstrike.com/blog/cr8escape-zero-day-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0811","tags":["web","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0811","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-6x2m-w449-qwx7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0811","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0811.json","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o","tags":["package"]},{"url":"https://www.crowdstrike.com/blog/cr8escape-zero-day-vulnerability-discovered-in-cri-o-container-engine-cve-2022-0811","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0810","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0810.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0811","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0860","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063911","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0860.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0866","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064006","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0866.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2051730","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0532","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0532","tags":["advisory"]},{"url":"https://github.com/cri-o/cri-o/security/advisories/GHSA-w2j5-3rcx-vx7x","tags":["article"]},{"url":"https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#enabling-unsafe-sysctls","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0870","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064013","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0870.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:0871","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064010","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0871.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055733","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25173","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25173","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25174","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25174","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25174","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25175","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055787","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25176","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25176","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25177","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055789","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25178","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25179","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25179","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25180","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25181","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25181","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25182","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25183","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25183","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25183","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2055804","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25184","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25184","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074847","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29036","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29036","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2022-04-12/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2074851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29046","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29046","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0811","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T14:03:40Z","modified":"2024-08-02T23:40:04.258Z","cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-1349","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T14:03:40Z","modified":"2024-08-02T23:40:04Z","updated_at":"2026-11-03T03:26:03.912978Z"}],"ghsa":[{"id":"GHSA-6x2m-w449-qwx7","title":"Code Injection in CRI-O","description":"### Impact\nA flaw introduced in CRI-O version 1.19 which an attacker can use to bypass the safeguards and set arbitrary kernel parameters on the host. As a result, anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime can abuse the `kernel.core_pattern` kernel parameter to achieve container escape and arbitrary code execution as root on any node in the cluster.\n\n### Patches\nThe patches will be present in 1.19.6, 1.20.7, 1.21.6, 1.22.3, 1.23.2, 1.24.0\n\n### Workarounds\n- Users can set manage_ns_lifecycle to false, which causes the sysctls to be configured by the OCI runtime, which typically filter these cases. This option is available in 1.20 and 1.19. Newer versions don't have this option.\n- An admission webhook could be created to deny pods that specify a `+` in the sysctl value of a pod.\n- A [PodSecurityPolicy](https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#podsecuritypolicy) [deprecated] could be created, specifying all sysctls as forbidden like so: \n```\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: sysctl-psp\nspec:\n  forbiddenSysctls:\n    - \"*\"\n```\nHowever, this option will not work if any sysctls are required by any pods in the cluster.\n\n\n### Credits\nCredit for finding this vulnerability goes to John Walker and Manoj Ahuje of Crowdstrike. The CRI-O community deeply thanks them for the report.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the CRI-O repo](http://github.com/cri-o/cri-o/issues)\n* To make a report, email your vulnerability to the private\n[cncf-crio-security@lists.cncf.io](mailto:cncf-crio-security@lists.cncf.io) list\nwith the security details and the details expected for [all CRI-O bug\nreports](https://github.com/cri-o/cri-o/blob/main/.github/ISSUE_TEMPLATE/bug-report.yml).\n","status":"published","published":"2022-03-15T20:13:38Z","modified":"2023-01-27T05:00:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:36:15.574072Z"}],"nvd":[{"id":"CVE-2022-0811","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T15:15:16.123Z","modified":"2026-06-17T04:21:17.997Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"ALPINE-CVE-2022-0811","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T15:15:16.123Z","modified":"2026-11-03T07:31:02.405133425Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:50:01.054176Z"},{"id":"AZL-37070","title":"CVE-2022-0811 affecting package cri-o for versions less than 1.22.3-1","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T15:15:16Z","modified":"2026-04-21T04:28:08.802858Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"GHSA-6x2m-w449-qwx7","title":"Code Injection in CRI-O","description":"### Impact\nA flaw introduced in CRI-O version 1.19 which an attacker can use to bypass the safeguards and set arbitrary kernel parameters on the host. As a result, anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime can abuse the `kernel.core_pattern` kernel parameter to achieve container escape and arbitrary code execution as root on any node in the cluster.\n\n### Patches\nThe patches will be present in 1.19.6, 1.20.7, 1.21.6, 1.22.3, 1.23.2, 1.24.0\n\n### Workarounds\n- Users can set manage_ns_lifecycle to false, which causes the sysctls to be configured by the OCI runtime, which typically filter these cases. This option is available in 1.20 and 1.19. Newer versions don't have this option.\n- An admission webhook could be created to deny pods that specify a `+` in the sysctl value of a pod.\n- A [PodSecurityPolicy](https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#podsecuritypolicy) [deprecated] could be created, specifying all sysctls as forbidden like so: \n```\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: sysctl-psp\nspec:\n  forbiddenSysctls:\n    - \"*\"\n```\nHowever, this option will not work if any sysctls are required by any pods in the cluster.\n\n\n### Credits\nCredit for finding this vulnerability goes to John Walker and Manoj Ahuje of Crowdstrike. The CRI-O community deeply thanks them for the report.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the CRI-O repo](http://github.com/cri-o/cri-o/issues)\n* To make a report, email your vulnerability to the private\n[cncf-crio-security@lists.cncf.io](mailto:cncf-crio-security@lists.cncf.io) list\nwith the security details and the details expected for [all CRI-O bug\nreports](https://github.com/cri-o/cri-o/blob/main/.github/ISSUE_TEMPLATE/bug-report.yml).\n","status":"published","published":"2022-03-15T20:13:38Z","modified":"2026-07-08T06:27:53.412202154Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:40.308826Z"},{"id":"RHSA-2022:0810","title":"Red Hat Security Advisory: OpenShift Container Platform 4.10.4 security update","status":"published","published":"2024-09-16T07:35:03Z","modified":"2025-11-22T12:30:48Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0860","title":"Red Hat Security Advisory: OpenShift Container Platform 4.9.25 security update","status":"published","published":"2024-09-16T07:35:10Z","modified":"2025-11-22T12:31:05Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0866","title":"Red Hat Security Advisory: OpenShift Container Platform 4.6.56 packages and security update","status":"published","published":"2024-09-16T07:35:32Z","modified":"2025-11-22T12:31:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0870","title":"Red Hat Security Advisory: OpenShift Container Platform 4.7.45 packages and security update","status":"published","published":"2024-09-16T07:35:18Z","modified":"2025-11-22T12:31:06Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"RHSA-2022:0871","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.35 security update","status":"published","published":"2024-09-16T07:39:57Z","modified":"2026-03-21T10:30:36.327177Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"CVE-2022-0811","description":"A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.","status":"published","published":"2022-03-16T14:03:40Z","modified":"2026-10-28T02:30:57.481349331Z","cwes":["CWE-94"],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"GO-2022-0354","title":"Code Injection in CRI-O in github.com/cri-o/cri-o","description":"Code Injection in CRI-O in github.com/cri-o/cri-o","status":"published","published":"2024-08-21T14:30:29Z","modified":"2026-03-03T04:50:02.52649Z","updated_at":"2026-11-02T15:47:00.604718Z"}]}}