CVE-2024-5154: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability (CVE-2024-5154) was discovered in cri-o that allows a malicious container to create symbolic links to arbitrary files on the host via directory traversal ("../"). The vulnerability was reported on June 12, 2024, affecting multiple versions of cri-o and OpenShift Container Platform (NVD, GitHub Advisory).

The vulnerability exists in cri-o's functionality that was added to show container mounts on the host. A malicious container can exploit this flaw by creating a symbolic link that points to arbitrary files or directories on the host system through directory traversal. The vulnerability has been assigned a CVSS v3.1 base score of 8.1 (HIGH) with the vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N (Red Hat Advisory).

This vulnerability allows a malicious container to read and write to arbitrary files on the host system, potentially leading to unauthorized access and modification of sensitive host system files. For example, an attacker could create symbolic links to critical system files like '/proc/mounts' through the '/root/mtab' path (GitHub Advisory).

The vulnerability can be exploited by creating a specially crafted container image that uses directory traversal to establish symbolic links to host system files. A proof-of-concept exploit has been demonstrated using a malicious container configuration that creates unauthorized symbolic links (GitHub Advisory).

The vulnerability has been patched in cri-o versions 1.30.1, 1.29.5, and 1.28.7. Users are strongly advised to upgrade to these patched versions. The fix has been incorporated into multiple OpenShift Container Platform versions through security advisories RHSA-2024:3676, RHSA-2024:3700, RHSA-2024:4008, and RHSA-2024:4486 (Red Hat Advisory).