CPE
A vulnerability in systemd-gpt-auto-generator in OpenShift Sandboxed Containers allows a malicious host to bypass TEE encryption by injecting unauthorized partitions that force sensitive guest memory to be paged to host-controlled storage.