Medium severity5.3NVD Advisory· Published Apr 18, 2022· Updated Jun 17, 2026
CVE-2022-27652
CVE-2022-27652
Description
A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Docker Engine) where containers started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/cri-o/cri-oGo | < 1.24.0 | 1.24.0 |
Affected products
7cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:mobyproject:moby:*:*:*:*:*:*:*:*range: <20.10.14
- (no CPE)
cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-4hj2-r2pm-3hc6ghsaADVISORY
- github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6nvdMitigationThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2022-27652ghsaADVISORY
News mentions
0No linked articles in our index yet.