6.9
Moyenne
CVE-2025-58354 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
Description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, a malicious host can selectively fail IO operations to skip initdata verification. This allows an attacker to launch arbitrary workloads while being able to attest successfully to Trustee impersonating any benign workload. This issue has been patched in Kata Containers version 3.21.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| kata-containers 3.21 | premières → < 3.21.0 | 3.21.0 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de kata-containers
Les 8 CVE de kata-containers →
CVE-2026-64676
Kata Containers is an open source implementation of lightweight Virtual Machines (VMs) that perform like containers
5.7
Moyenne
CVE-2026-47243
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
9.2
Critique
CVE-2026-50540
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
9.6
Critique
CVE-2026-44210
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…
5.8
Moyenne