CVE-2020-2023

Name of the Vulnerable Software and Affected Versions Kata Containers versions 1.11 earlier than 1.11.1 Kata Containers versions 1.10 earlier than 1.10.5 Kata Containers versions 1.9 and earlier

Description The issue allows malicious containers to access the guest's root filesystem device, potentially leading to code execution on the guest and masquerading as the kata-agent.

Recommendations For Kata Containers version 1.11, update to version 1.11.1 or later. For Kata Containers version 1.10, update to version 1.10.5 or later. For Kata Containers version 1.9 and earlier, update to a newer version that contains a fix for this issue.