VDB
RHSA-2022%3A1370
RHSA-2022%3A1370
PUBLISHED
CVSS 4.800000190734863 MEDIUM
A flaw was found in Moby (Docker Engine), where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with inheritable file capabilities to elevate those capabilities to the permitted set when execve(2) runs. Containers using Linux users and groups to perform privilege separation inside the container are most directly impacted.
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-kube-descheduler-operator@sha256:df7a07e39240c213bcac04cbd1f57bb92930f40d136c7876ec0ba0c088bd7ba4_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/kubernetes-nmstate-rhel8-operator@sha256:63a9c7e0b5b5d867ff6fd663eaf57ff70eb49f5f3831f0996f65af8c7254c060_s390x as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/ose-local-storage-static-provisioner@sha256:b4fd532bb19589be028b1c7da3f39b79155d452a531b3c5654fa6dd221c3d95d_s390x as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-local-storage-static-provisioner@sha256:b4fd532bb19589be028b1c7da3f39b79155d452a531b3c5654fa6dd221c3d95d_s390x |
| Red Hat | openshift4/ose-ptp@sha256:8d12b1ab8caa866766dcc110db3e3f695c797a5fabcd968fe2bd8d9375e01f53_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-ptp@sha256:8d12b1ab8caa866766dcc110db3e3f695c797a5fabcd968fe2bd8d9375e01f53_ppc64le, * |
| Red Hat | openshift4/ose-egress-http-proxy@sha256:ec1f565f0e2ecf155b703d77f7f1c89b8cbccb26fadcfe8350685838094163f8_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/ose-ptp-operator@sha256:42b517309ea4b2abc94445d1eb8a172edc50e36a07acb72f740f02f69f0b2508_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-ptp-operator@sha256:42b517309ea4b2abc94445d1eb8a172edc50e36a07acb72f740f02f69f0b2508_ppc64le, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:6d23da6c70d339203b73cdbc3b66a4f625884391bf3538038fe4cdac86912b8e_s390x as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-sriov-infiniband-cni@sha256:6d23da6c70d339203b73cdbc3b66a4f625884391bf3538038fe4cdac86912b8e_s390x, * |
| Red Hat | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:47f23979b19447ec3cd2c2d75f65acea3bb47e19a2bb8b15b096061332aedd58_s390x as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-vertical-pod-autoscaler-rhel8-operator@sha256:47f23979b19447ec3cd2c2d75f65acea3bb47e19a2bb8b15b096061332aedd58_s390x, * |
| Red Hat | openshift4/ose-metering-hive@sha256:5c8ace4e8c189f1bbf2565aff5e1a5f4ed7e0a472f5957f184d777fcfaa1b331_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-metering-hive@sha256:5c8ace4e8c189f1bbf2565aff5e1a5f4ed7e0a472f5957f184d777fcfaa1b331_amd64 |
| Red Hat | openshift4/ose-sriov-network-webhook@sha256:4e033ae78a3047b57c402a8087d53f50e6c56ad1de42496f25815312bb2c190f_s390x as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-sriov-network-webhook@sha256:4e033ae78a3047b57c402a8087d53f50e6c56ad1de42496f25815312bb2c190f_s390x |
| Red Hat | openshift4/ose-node-feature-discovery@sha256:8b51e4bcd12529c1962876a7bbb3afa84f8bfb5202ee980c243577cf04bc228e_s390x as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-node-feature-discovery@sha256:8b51e4bcd12529c1962876a7bbb3afa84f8bfb5202ee980c243577cf04bc228e_s390x, * |
| Red Hat | openshift4/ose-sriov-cni@sha256:3d8e90a5014c0669fb0f38a1ea1180bdd57906c3aed931c44a7044fbc415cad7_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-sriov-cni@sha256:3d8e90a5014c0669fb0f38a1ea1180bdd57906c3aed931c44a7044fbc415cad7_ppc64le, * |
| Red Hat | openshift4/ose-local-storage-diskmaker@sha256:2a9f4e112ad575f70f19590f991693471c8f6be0c72f0ce02dc24f7880383c4c_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/ose-local-storage-static-provisioner@sha256:37730f7acce4d42a12c23cc90a878bf2feee4f0b5f6adf594c8f362d4728131f_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/ptp-must-gather-rhel8@sha256:62543a89fd75ac6452c090fd3c68f1aaf551461721ef7281d331b9ab7ac4e43a_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, * |
| Red Hat | openshift4/ose-sriov-infiniband-cni@sha256:c3e3ece1dea8e326b50de7c925cab52373a107004b27fbdb0e88d94738a8806a_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-sriov-infiniband-cni@sha256:c3e3ece1dea8e326b50de7c925cab52373a107004b27fbdb0e88d94738a8806a_amd64 |
| Red Hat | openshift4/ose-local-storage-mustgather-rhel8@sha256:49fb76099e06f90f6e4c71109f730e5a2bce82d1870c56c5c749e76bd1a73a4b_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-local-storage-mustgather-rhel8@sha256:49fb76099e06f90f6e4c71109f730e5a2bce82d1870c56c5c749e76bd1a73a4b_amd64 |
| Red Hat | openshift4/ose-cluster-nfd-operator@sha256:a6f76410161b97c14f8227c39928b20003f56e9cfc46ce54cfa5ada91be742b6_s390x as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-cluster-nfd-operator@sha256:a6f76410161b97c14f8227c39928b20003f56e9cfc46ce54cfa5ada91be742b6_s390x |
| Red Hat | openshift4/ose-helm-operator@sha256:20ab3ef6957ddae54b354959aa98a492dbb1c3f53edfc349f0eac84ce196dafc_ppc64le as a component of Red Hat OpenShift Container Platform 4.8 | *, openshift4/ose-helm-operator@sha256:20ab3ef6957ddae54b354959aa98a492dbb1c3f53edfc349f0eac84ce196dafc_ppc64le |
| Red Hat | openshift4/ose-node-problem-detector-rhel8@sha256:66cc71b1f55bc2f63b618734c8908bf9613ce5fc0a062ee16db6a6ae1a6e47a4_amd64 as a component of Red Hat OpenShift Container Platform 4.8 | openshift4/ose-node-problem-detector-rhel8@sha256:66cc71b1f55bc2f63b618734c8908bf9613ce5fc0a062ee16db6a6ae1a6e47a4_amd64, * |
…and 94 more
Timeline
- Apr 20, 2022 CVE Published
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
- May 15, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:1370 advisory
- https://access.redhat.com/security/updates/classification/#moderate advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2066837 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1370.json advisory
- https://access.redhat.com/security/cve/CVE-2022-24769 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-24769 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-24769 advisory
- https://github.com/moby/moby/security/advisories/GHSA-2mm7-x5h6-5pvq advisory