VDB
RHSA-2024%3A1559
RHSA-2024%3A1559
PUBLISHED
CVSS 6.5 MEDIUM
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to gain access to the root HCP worker node's volume by creating a custom Persistent Volume that matches the name of a worker node.
Risk Scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:a17d0f58ab1e7e6c5dd8a6074cf3e992d72a6cab841e53e270038ced23ff58bc_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:a17d0f58ab1e7e6c5dd8a6074cf3e992d72a6cab841e53e270038ced23ff58bc_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:a17d0f58ab1e7e6c5dd8a6074cf3e992d72a6cab841e53e270038ced23ff58bc_ppc64le, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:a17d0f58ab1e7e6c5dd8a6074cf3e992d72a6cab841e53e270038ced23ff58bc_ppc64le |
| Red Hat | openshift4/ose-agent-installer-utils-rhel9@sha256:8f4d9edd2e7aff3d09bd1500b30da5852aab81762fa9e134fc1d8709bdd54ef2_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-agent-installer-utils-rhel9@sha256:8f4d9edd2e7aff3d09bd1500b30da5852aab81762fa9e134fc1d8709bdd54ef2_arm64 |
| Red Hat | openshift4/ose-ovn-kubernetes-rhel9@sha256:3d2054019ab3942385ec2f74ea0aad9ae75a205dfea5fe897b91db52b11af0d3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ovn-kubernetes-rhel9@sha256:3d2054019ab3942385ec2f74ea0aad9ae75a205dfea5fe897b91db52b11af0d3_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:3d2054019ab3942385ec2f74ea0aad9ae75a205dfea5fe897b91db52b11af0d3_ppc64le, openshift4/ose-ovn-kubernetes-rhel9@sha256:3d2054019ab3942385ec2f74ea0aad9ae75a205dfea5fe897b91db52b11af0d3_ppc64le |
| Red Hat | openshift4/ose-cluster-capi-rhel9-operator@sha256:ac1054b7b1880efcb417ed6c931cac69cdcf4f3fbb69713c2e444b30a2a1d6ef_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-capi-rhel9-operator@sha256:ac1054b7b1880efcb417ed6c931cac69cdcf4f3fbb69713c2e444b30a2a1d6ef_ppc64le, *, * |
| Red Hat | openshift4/ose-operator-registry-rhel9@sha256:b0c0be56a1ae82b781327e913439e5ad118135e6f49e46faed5a03e2a108b0b1_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-operator-registry-rhel9@sha256:b0c0be56a1ae82b781327e913439e5ad118135e6f49e46faed5a03e2a108b0b1_arm64, openshift4/ose-operator-registry-rhel9@sha256:b0c0be56a1ae82b781327e913439e5ad118135e6f49e46faed5a03e2a108b0b1_arm64, openshift4/ose-operator-registry-rhel9@sha256:b0c0be56a1ae82b781327e913439e5ad118135e6f49e46faed5a03e2a108b0b1_arm64 |
| Red Hat | openshift4/ose-azure-file-csi-driver-rhel9@sha256:acda03762e3df8260752789ad128d84f153dcd485c46a00c67a30cc9f2e8f204_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-azure-file-csi-driver-rhel9@sha256:acda03762e3df8260752789ad128d84f153dcd485c46a00c67a30cc9f2e8f204_amd64, openshift4/ose-azure-file-csi-driver-rhel9@sha256:acda03762e3df8260752789ad128d84f153dcd485c46a00c67a30cc9f2e8f204_amd64, openshift4/ose-azure-file-csi-driver-rhel9@sha256:acda03762e3df8260752789ad128d84f153dcd485c46a00c67a30cc9f2e8f204_amd64 |
| Red Hat | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:0897240f990ce8bbc86e24fcbb1644370e3fa4e04c403b8f7483d7c6d68e9592_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-baremetal-machine-controllers-rhel9@sha256:0897240f990ce8bbc86e24fcbb1644370e3fa4e04c403b8f7483d7c6d68e9592_s390x, openshift4/ose-baremetal-machine-controllers-rhel9@sha256:0897240f990ce8bbc86e24fcbb1644370e3fa4e04c403b8f7483d7c6d68e9592_s390x, openshift4/ose-baremetal-machine-controllers-rhel9@sha256:0897240f990ce8bbc86e24fcbb1644370e3fa4e04c403b8f7483d7c6d68e9592_s390x |
| Red Hat | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:f6d37eacdf56372b370b0a36ab74e75cd56e789ce3bb5db4f08d07cc19adc650_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:f6d37eacdf56372b370b0a36ab74e75cd56e789ce3bb5db4f08d07cc19adc650_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:f6d37eacdf56372b370b0a36ab74e75cd56e789ce3bb5db4f08d07cc19adc650_amd64, openshift4/ose-ibm-vpc-block-csi-driver-rhel9@sha256:f6d37eacdf56372b370b0a36ab74e75cd56e789ce3bb5db4f08d07cc19adc650_amd64 |
| Red Hat | openshift4/ose-cluster-autoscaler-rhel9@sha256:ff86ca2894b890d3da7587bc640aba4a4de58db56b4bbf8df3f4ba2af08e5485_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-cluster-autoscaler-rhel9@sha256:ff86ca2894b890d3da7587bc640aba4a4de58db56b4bbf8df3f4ba2af08e5485_s390x, openshift4/ose-cluster-autoscaler-rhel9@sha256:ff86ca2894b890d3da7587bc640aba4a4de58db56b4bbf8df3f4ba2af08e5485_s390x, openshift4/ose-cluster-autoscaler-rhel9@sha256:ff86ca2894b890d3da7587bc640aba4a4de58db56b4bbf8df3f4ba2af08e5485_s390x |
| Red Hat | openshift4/ose-container-networking-plugins-rhel8@sha256:3d6493fc6d5614896595a7f03a61568b82b33e95b21dd8eea641c6524ba8a4a0_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-container-networking-plugins-rhel8@sha256:3d6493fc6d5614896595a7f03a61568b82b33e95b21dd8eea641c6524ba8a4a0_s390x, *, openshift4/ose-container-networking-plugins-rhel8@sha256:3d6493fc6d5614896595a7f03a61568b82b33e95b21dd8eea641c6524ba8a4a0_s390x |
| Red Hat | openshift4/ose-deployer@sha256:f5acfeafc526b64b29215059ed4986b0144a49caf818b1f68cb1d2d95c2dfa2c_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-deployer@sha256:f5acfeafc526b64b29215059ed4986b0144a49caf818b1f68cb1d2d95c2dfa2c_arm64, openshift4/ose-deployer@sha256:f5acfeafc526b64b29215059ed4986b0144a49caf818b1f68cb1d2d95c2dfa2c_arm64, openshift4/ose-deployer@sha256:f5acfeafc526b64b29215059ed4986b0144a49caf818b1f68cb1d2d95c2dfa2c_arm64 |
| Red Hat | openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:3511f317a9b17272844542e25bdf83f039736548f3696722f6d120ed9eb1750f_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-k8s-prometheus-adapter-rhel9@sha256:3511f317a9b17272844542e25bdf83f039736548f3696722f6d120ed9eb1750f_arm64 |
| Red Hat | openshift4/ose-csi-driver-nfs-rhel9@sha256:6adc0cfa0f04dc777c52c7afc6db8c8cb0ad68dd004e179516b1bb88c9c1bde6_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-csi-driver-nfs-rhel9@sha256:6adc0cfa0f04dc777c52c7afc6db8c8cb0ad68dd004e179516b1bb88c9c1bde6_amd64, openshift4/ose-csi-driver-nfs-rhel9@sha256:6adc0cfa0f04dc777c52c7afc6db8c8cb0ad68dd004e179516b1bb88c9c1bde6_amd64, openshift4/ose-csi-driver-nfs-rhel9@sha256:6adc0cfa0f04dc777c52c7afc6db8c8cb0ad68dd004e179516b1bb88c9c1bde6_amd64 |
| Red Hat | openshift4/ose-sdn-rhel9@sha256:2023e913f9a301911e7e6a463a9f27155dc487cb187b98224bff93057e686b6f_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-sdn-rhel9@sha256:2023e913f9a301911e7e6a463a9f27155dc487cb187b98224bff93057e686b6f_s390x, *, openshift4/ose-sdn-rhel9@sha256:2023e913f9a301911e7e6a463a9f27155dc487cb187b98224bff93057e686b6f_s390x |
| Red Hat | openshift4/ose-cli@sha256:c09e42007160608540c4014c7003bcf98638c468788560bcfc5c587b7d7fff61_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-cli@sha256:c09e42007160608540c4014c7003bcf98638c468788560bcfc5c587b7d7fff61_ppc64le, openshift4/ose-cli@sha256:c09e42007160608540c4014c7003bcf98638c468788560bcfc5c587b7d7fff61_ppc64le |
| Red Hat | openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:49fdcc1fa3e5877fe46dcc228cfa8b8d335d0b9bfdc8a9f50b4b17849d894eba_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:49fdcc1fa3e5877fe46dcc228cfa8b8d335d0b9bfdc8a9f50b4b17849d894eba_amd64, openshift4/ose-kubevirt-cloud-controller-manager-rhel9@sha256:49fdcc1fa3e5877fe46dcc228cfa8b8d335d0b9bfdc8a9f50b4b17849d894eba_amd64 |
| Red Hat | openshift4/egress-router-cni-rhel8@sha256:fc51ca6ee52f832a9fa84800c26694d65751bd82a1d59c01b932fde6506150ec_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/egress-router-cni-rhel8@sha256:fc51ca6ee52f832a9fa84800c26694d65751bd82a1d59c01b932fde6506150ec_s390x, * |
| Red Hat | openshift4/ose-haproxy-router@sha256:f36988be94f220fbbcd130a55bd815828078fcb2b9619f35550572abd9350cd4_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-haproxy-router@sha256:f36988be94f220fbbcd130a55bd815828078fcb2b9619f35550572abd9350cd4_amd64, openshift4/ose-haproxy-router@sha256:f36988be94f220fbbcd130a55bd815828078fcb2b9619f35550572abd9350cd4_amd64, openshift4/ose-haproxy-router@sha256:f36988be94f220fbbcd130a55bd815828078fcb2b9619f35550572abd9350cd4_amd64 |
| Red Hat | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0d4db67b0c4e605da06abfdab01c721543108bf93f60a53bb44f44394a7cf06d_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0d4db67b0c4e605da06abfdab01c721543108bf93f60a53bb44f44394a7cf06d_amd64, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0d4db67b0c4e605da06abfdab01c721543108bf93f60a53bb44f44394a7cf06d_amd64, openshift4/ose-libvirt-machine-controllers-rhel9@sha256:0d4db67b0c4e605da06abfdab01c721543108bf93f60a53bb44f44394a7cf06d_amd64 |
| Red Hat | openshift4/ose-ibmcloud-cluster-api-controllers-rhel9@sha256:35f3f24fc676dba43e08dae80c93f17a350e8a3db571b9068bd4d4cc8c045c3a_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-ibmcloud-cluster-api-controllers-rhel9@sha256:35f3f24fc676dba43e08dae80c93f17a350e8a3db571b9068bd4d4cc8c045c3a_amd64, * |
…and 1308 more
Timeline
- Apr 2, 2024 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- May 16, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2024:1559 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2265398 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2268046 issue
- https://issues.redhat.com/browse/OCPBUGS-29332 advisory
- https://issues.redhat.com/browse/OCPBUGS-29881 advisory
- https://issues.redhat.com/browse/OCPBUGS-30045 advisory
- https://issues.redhat.com/browse/OCPBUGS-30118 advisory
- https://issues.redhat.com/browse/OCPBUGS-30164 advisory
- https://issues.redhat.com/browse/OCPBUGS-30286 advisory
- https://issues.redhat.com/browse/OCPBUGS-30605 advisory
- https://issues.redhat.com/browse/OCPBUGS-30804 advisory
- https://issues.redhat.com/browse/OCPBUGS-30859 advisory
- https://issues.redhat.com/browse/OCPBUGS-30862 advisory
- https://issues.redhat.com/browse/OCPBUGS-30869 advisory
- https://issues.redhat.com/browse/OCPBUGS-30871 advisory
- https://issues.redhat.com/browse/OCPBUGS-30915 advisory
- https://issues.redhat.com/browse/OCPBUGS-30917 advisory
- https://issues.redhat.com/browse/OCPBUGS-31046 advisory
- https://issues.redhat.com/browse/OCPBUGS-31087 advisory
…and 14 more