CVE-2025-0750: Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Other sources
The UnMountPodLogs and LinkContainerLogs functions in CRI-O do not properly validate the emptyDirVolName parameter, making them vulnerable to a path traversal attack. An attacker can exploit this to unmount arbitrary paths on the host system, potentially causing denial of service or compromising system integrity.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0750?
CVE-2025-0750 is classified as a high severity vulnerability due to its potential for node-level denial of service.
How do I fix CVE-2025-0750?
To fix CVE-2025-0750, update CRI-O to a version newer than 1.33.0 and ensure proper permissions are configured for pod management.
What causes CVE-2025-0750?
CVE-2025-0750 is caused by a path traversal vulnerability in the log management functions within CRI-O.
Who is affected by CVE-2025-0750?
CVE-2025-0750 affects users of CRI-O versions up to and including 1.33.0 who have permissions to create and delete Pods.
What are the potential impacts of CVE-2025-0750?
The potential impacts of CVE-2025-0750 include unauthorized unmounting of arbitrary host paths, leading to service disruptions on nodes.