Product
Arbitrary Mount Vulnerability in Kata Containers Confidential Containers
1 TTP 1 CVEA vulnerability in Kata Containers, specifically when using genpolicy for Confidential Containers guest protection, allows a malicious host operator to bypass mount and storage rule validations during CreateContainer operations.
Privilege Escalation Vulnerability in Performance Co-Pilot linux_sockets Module
1 rule 1 TTP 1 CVEA file descriptor leak in the Performance Co-Pilot (PCP) linux_sockets module allows an attacker with initial code execution to escalate privileges to root.
Command Injection in PCP linux_sockets PMDA
1 TTP 1 CVEA command injection vulnerability (CVE-2026-16524) in the PCP linux_sockets PMDA allows local attackers to execute arbitrary commands by injecting shell metacharacters into the network.persocket.filter metric.
CRI-O Environment Variable Injection Vulnerability (CVE-2026-15809)
1 rule 1 TTP 2 CVEsA critical vulnerability, CVE-2026-15809, in CRI-O allows an attacker with the ability to set container environment variables to bypass a previous fix (CVE-2022-4318), inject a newline character into the HOME environment variable, and add arbitrary lines to /etc/passwd, potentially leading to privilege escalation or persistence within the container.
CVE-2026-14476: SSSD AD GPO Provider Path Traversal to Root File Write and Authentication Bypass
5 TTPs 1 CVEA path traversal vulnerability (CVE-2026-14476) in SSSD's Active Directory Group Policy Object (AD GPO) provider allows an authenticated attacker with AD GPO management access to write arbitrary files outside the GPO cache directory with root privileges, leading to Kerberos configuration injection and potential authentication bypass on Red Hat Enterprise Linux systems.