Memory Management Vulnerability in cri-o Affects Red Hat

CVE-2019-14891

What is CVE-2019-14891?

A vulnerability has been identified in cri-o where all pod-related processes are managed within the same memory cgroup. This flaw can lead to critical container management processes being terminated if a workload process creates an out-of-memory (OOM) condition. An attacker could leverage this weakness to gain unauthorized access to the host's network resources, potentially compromising the security of the entire system.

References