PT-2025-4037 · Cri-O+1 · Cri-O+1

Dongha Kim · Published 2025-01-28 · Updated 2025-02-11 · CVE-2025-0750

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions CRI-O (affected versions not specified)

Description A path traversal issue in the log management functions, specifically UnMountPodLogs and LinkContainerLogs, may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths. This could lead to node-level denial of service by unmounting critical system directories.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-0750

GHSA-HP5J-2585-QX6G

GO-2025-3426

OPENSUSE-SU-2025:14728-1

OPENSUSE-SU-2025_0429-1

RHSA-2025:1122

SUSE-SU-2025:0429-1

Affected Products

Cri-O

Suse

References · 43

• https://osv.dev/vulnerability/GHSA-hp5j-2585-qx6g · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3426 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:1122 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0429-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0750 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14728-1 · Vendor Advisory
• https://github.com/cri-o/cri-o · Note
• https://suse.com/security/cve/CVE-2025-24369 · Note
• https://suse.com/security/cve/CVE-2024-50354 · Note
• https://suse.com/security/cve/CVE-2022-47930 · Note
• https://suse.com/security/cve/CVE-2025-24884 · Note
• https://github.com/advisories/GHSA-hp5j-2585-qx6g · Note
• https://suse.com/security/cve/CVE-2025-23216 · Note
• https://suse.com/security/cve/CVE-2025-22866 · Note
• https://suse.com/security/cve/CVE-2024-13484 · Note