GHSA-cvxm-645q-p574
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network vector via Kubernetes API; PR:L for required pod-creation permission; AC:H for two-stage attack requiring victim pod with non-Always pull policy; S:C as compromise crosses into victim pod identity.
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (CNA).
CVSS VectorVendor
Lifecycle Timeline
2Description PRE-NVD
Articles & Coverage 4
AnalysisAI
Checkpoint image poisoning in containerd's CRI implementation allows an attacker with pod-creation permissions to corrupt the node-local image cache, causing victim pods to silently execute malicious images in place of legitimate ones. The root cause is missing validation of image references embedded in checkpoint image configurations: containerd trusts attacker-controlled strings in the checkpoint archive to drive image pulls and local tag assignment. Subsequent pods using an IfNotPresent or Never pull policy then inherit the poisoned tag and execute arbitrary code under the victim pod's Kubernetes identity. No active exploitation has been confirmed (not in CISA KEV), and no public exploit code has been identified at time of analysis; vendor-released patches are available.
Technical ContextAI
The vulnerability is in containerd's CRI (Container Runtime Interface) plugin, specifically in the checkpoint/restore workflow - a feature derived from CRIU (Checkpoint/Restore In Userspace) that packages container state as OCI image artifacts for migration or restart. During checkpoint import, containerd parses image reference strings embedded in the checkpoint archive's configuration to determine which images to pull and how to tag them locally. Because these strings originate from the checkpoint image itself (attacker-controlled input) and are not validated against registry authorization policies or naming constraints, the runtime blindly executes pulls and local tag assignments directed by the malicious archive. No CWE is formally assigned in the available data; the root cause class corresponds to CWE-20 (Improper Input Validation) or CWE-345 (Insufficient Verification of Data Authenticity). No CPE strings were provided; affected versions are containerd 2.x prior to 2.3.2, 2.2.5, and 2.1.9 respectively.
RemediationAI
Update containerd to a patched release: 2.3.2, 2.2.5, or 2.1.9, available at https://github.com/containerd/containerd/releases. These are vendor-confirmed fix versions per the official advisory at https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574. Where immediate patching is not feasible, apply the following layered compensating controls: (1) Restrict pod-creation RBAC permissions to trusted principals only - this eliminates the attacker's entry point, though it may disrupt developer self-service workflows; (2) Enforce an Always image pull policy cluster-wide via an admission webhook (OPA/Gatekeeper or Kyverno) - this breaks the exploitation chain at the victim-pod stage by bypassing the poisoned local cache, though it increases registry traffic and introduces registry availability as a dependency for pod startup; (3) Disable or block the checkpoint/restore feature via admission control if it is not operationally required - this eliminates the poisoning vector entirely but will impact workloads relying on container migration or stateful restart. None of these controls substitute for patching.
More in Checkpoint
View allPotentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to e
Authentication bypass in the Check Point SmartConsole login process lets an unauthenticated remote attacker mint a valid
The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data
PyTorch is a Python package that provides tensor computation. [CVSS 8.8 HIGH]
Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. Rated high sever
Remote code execution in PyTorch Lightning through 2.6.5 allows an attacker who can get a victim to load a malicious che
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH lo
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clien
Path traversal in Hugging Face Accelerate through 1.14.0 exposes two distinct attack outcomes when a user loads a crafte
Out-of-bounds read in the Linux kernel drm/amdkfd CRIU checkpoint path leaks kernel memory to userspace on systems with
Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x bef
Vendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SLES15-SP5-CHOST-BYOS-SAP-CCloud | Not-Affected |
| SLES15-SP6-CHOST-BYOS | Not-Affected |
| SLES15-SP6-CHOST-BYOS-Aliyun | Not-Affected |
| SLES15-SP6-CHOST-BYOS-Azure | Not-Affected |
| SLES15-SP6-CHOST-BYOS-EC2 | Not-Affected |
| SLES15-SP6-CHOST-BYOS-GCE | Not-Affected |
| SLES15-SP6-CHOST-BYOS-GDC | Not-Affected |
| SLES15-SP6-CHOST-BYOS-SAP-CCloud | Not-Affected |
| SLES15-SP7-CHOST-BYOS-Aliyun | Not-Affected |
| SLES15-SP7-CHOST-BYOS-Azure | Not-Affected |
| SLES15-SP7-CHOST-BYOS-EC2 | Not-Affected |
| SLES15-SP7-CHOST-BYOS-GCE | Not-Affected |
| SLES15-SP7-CHOST-BYOS-GDC | Not-Affected |
| SLES15-SP7-CHOST-BYOS-SAP-CCloud | Not-Affected |
| SUSE Linux Enterprise Desktop 15 SP7 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 12 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Micro 5.3 | Not-Affected |
| SUSE Linux Enterprise Micro 5.4 | Not-Affected |
| SUSE Linux Enterprise Micro 5.5 | Not-Affected |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server 16.0 | Not-Affected |
| SUSE Linux Enterprise Server 16.1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP7 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Not-Affected |
| SUSE Linux Micro 6.0 | Not-Affected |
| SUSE Linux Micro 6.1 | Not-Affected |
| SUSE Linux Micro 6.2 | Not-Affected |
| SUSE Package Hub 15 SP7 | Affected |
| openSUSE Leap 16.0 | Not-Affected |
| SLES15-SP3-CHOST-BYOS-Aliyun | Not-Affected |
| SLES15-SP3-CHOST-BYOS-Azure | Not-Affected |
| SLES15-SP3-CHOST-BYOS-EC2 | Not-Affected |
| SLES15-SP3-CHOST-BYOS-GCE | Not-Affected |
| SLES15-SP3-CHOST-BYOS-SAP-CCloud | Not-Affected |
| SLES15-SP4-CHOST-BYOS | Not-Affected |
| SLES15-SP4-CHOST-BYOS-Aliyun | Not-Affected |
| SLES15-SP4-CHOST-BYOS-Azure | Not-Affected |
| SLES15-SP4-CHOST-BYOS-EC2 | Not-Affected |
| SLES15-SP4-CHOST-BYOS-GCE | Not-Affected |
| SLES15-SP4-CHOST-BYOS-SAP-CCloud | Not-Affected |
| SLES15-SP5-CHOST-BYOS-Aliyun | Not-Affected |
| SLES15-SP5-CHOST-BYOS-Azure | Not-Affected |
| SLES15-SP5-CHOST-BYOS-EC2 | Not-Affected |
| SLES15-SP5-CHOST-BYOS-GCE | Not-Affected |
| SLES15-SP5-CHOST-BYOS-GDC | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server 12 SP5 | Not-Affected |
| SUSE Linux Enterprise Server 12 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP4-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP5-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP6-LTSS | Not-Affected |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | Not-Affected |
| SUSE Manager Proxy 4.3 | Not-Affected |
| SUSE Manager Retail Branch Server 4.3 | Not-Affected |
| SUSE Manager Server 4.3 | Not-Affected |
| SUSE CaaS Platform 3.0 | Not-Affected |
| SUSE CaaS Platform 4.0 | Not-Affected |
| SUSE Enterprise Storage 6 | Not-Affected |
| SUSE Enterprise Storage 7 | Not-Affected |
| SUSE Enterprise Storage 7.1 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15 SP6 | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15-ESPOS | Not-Affected |
| SUSE Linux Enterprise High Performance Computing 15-LTSS | Not-Affected |
| SUSE Linux Enterprise Micro 5.0 | Not-Affected |
| SUSE Linux Enterprise Micro 5.1 | Not-Affected |
| SUSE Linux Enterprise Micro 5.2 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 12 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Module for Containers 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| SUSE Linux Enterprise Server 12 | Not-Affected |
| SUSE Linux Enterprise Server 12 SP3 | Not-Affected |
| SUSE Linux Enterprise Server 12 SP4 | Not-Affected |
| SUSE Linux Enterprise Server 15 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP1-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP2-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3-BCL | Not-Affected |
| SUSE Linux Enterprise Server 15 SP3-LTSS | Not-Affected |
| SUSE Linux Enterprise Server 15-LTSS | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 12 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | Not-Affected |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | Not-Affected |
| SUSE Manager Proxy 4.0 | Not-Affected |
| SUSE Manager Proxy 4.1 | Not-Affected |
| SUSE Manager Proxy 4.2 | Not-Affected |
| SUSE Manager Retail Branch Server 4.0 | Not-Affected |
| SUSE Manager Retail Branch Server 4.1 | Not-Affected |
| SUSE Manager Retail Branch Server 4.2 | Not-Affected |
| SUSE Manager Server 4.0 | Not-Affected |
| SUSE Manager Server 4.1 | Not-Affected |
| SUSE Manager Server 4.2 | Not-Affected |
| SUSE OpenStack Cloud 6 | Not-Affected |
| SUSE OpenStack Cloud 6-LTSS | Not-Affected |
| openSUSE Leap 15.3 | Not-Affected |
| openSUSE Leap 15.4 | Not-Affected |
| openSUSE Leap 15.5 | Not-Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Not-Affected |
| openSUSE Leap 15.6 | Affected |
| openSUSE Leap Micro 5.2 | Not-Affected |
| openSUSE Leap Micro 5.3 | Not-Affected |
| openSUSE Leap Micro 5.4 | Not-Affected |
| openSUSE Leap Micro 5.5 | Not-Affected |
| SLES-CHOST-BYOS-Aliyun | Not-Affected |
| SLES-CHOST-BYOS-Azure | Not-Affected |
| SLES-CHOST-BYOS-EC2 | Not-Affected |
| SLES-CHOST-BYOS-GCE | Not-Affected |
| SLES-CHOST-BYOS-GDC | Not-Affected |
| SLES-CHOST-BYOS-SAP-CCloud | Not-Affected |
Share
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-41108