CVE-2024-29990: 
AKS Node Linux vulnerability analysis and mitigation

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (CVE-2024-29990) is a security flaw discovered in Azure Kubernetes Service Confidential Containers (AKSCC). The vulnerability was disclosed on April 9, 2024, and affects Microsoft Azure Kubernetes Service confidential containers versions up to (excluding) 0.3.4 (NVD).

The vulnerability has been assigned a CVSSv3 score of 9.0 (Critical) with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H. The vulnerability is classified as an elevation of privilege (EoP) issue, requiring specific preparation of the target environment by an attacker (Tenable).

Successful exploitation of this vulnerability would enable an attacker to steal credentials and affect resources beyond the security scope managed by AKSCC. This includes the ability to take over both confidential guests and containers beyond the network stack it might be bound to (Tenable).

Microsoft has released a patch for this vulnerability. Organizations using Azure Kubernetes Service Confidential Containers should upgrade to version 0.3.4 or later to address this security issue (NVD).