Product
Arbitrary Mount Vulnerability in Kata Containers Confidential Containers
1 TTP 1 CVEA vulnerability in Kata Containers, specifically when using genpolicy for Confidential Containers guest protection, allows a malicious host operator to bypass mount and storage rule validations during CreateContainer operations.
Unauthorized mem-agent ttRPC methods in Kata Containers
1 TTP 1 CVEA vulnerability in the Kata Containers mem-agent component allows an untrusted host to invoke unauthorized ttRPC methods, resulting in potential memory tampering within confidential guest environments.
Kata Containers Guest-to-Host Root Escape via Virtiofs FUSE_SYMLINK
2 rules 1 TTP 1 CVEA vulnerability in Kata Containers allows a guest root user to escalate privileges to host root by exploiting the virtiofs shared file system to create arbitrary symlinks on the host.
Kata Containers CopyFile Policy Subversion via Symlinks
3 rules 2 TTPs 1 CVEAn oversight in the CopyFile policy in Kata Containers allows untrusted hosts to write to arbitrary locations inside the guest workload image via symlinks, enabling binary overwrites and data exfiltration.