PT-2025-39220 · Unknown · Kata Containers

Published 2025-09-23 · Updated 2025-09-24 · CVE-2025-58354

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Kata Containers versions prior to 3.21.0

Description Kata Containers is an open source project focused on lightweight Virtual Machines that function like containers. In versions prior to 3.21.0, a malicious host can bypass initdata verification. Specifically, on TDX systems running confidential guests, a malicious host can selectively fail Input/Output (IO) operations to skip initdata verification. This allows an attacker to launch arbitrary workloads while successfully attesting to Trustee, impersonating a benign workload.

Recommendations Update to Kata Containers version 3.21.0 or later.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2025-58354

GHSA-989W-4XR2-WW9M

Affected Products

Kata Containers

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58354.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-58354 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58354 · Security Note
• https://github.com/kata-containers/kata-containers/commit/3e67f92e34be974e792c153add76e4e4baac9de0 · Note
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-989w-4xr2-ww9m · Note
• https://t.me/cveNotify/136205 · Telegram Post
• https://twitter.com/CVEnew/status/1970621782462996794 · Twitter Post
• https://t.me/CVEtracker/33205 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1970662180706996703 · Twitter Post