Process Isolation Flaw in rkt Container Runtime by CoreOS

CVE-2019-10147

What is CVE-2019-10147?

The rkt container runtime, developed by CoreOS, experiences a significant vulnerability that stems from its inadequate process isolation for containers executed with the 'rkt enter' command. This flaw permits processes running within compromised containers to escape cgroups restrictions during the execution phase. As a result, attackers can potentially gain unauthorized access to host resources, posing a risk to the overall security posture of the system.

References