Wind River Support Network

HomeDefectsLIN1022-6226

Fixed

LIN1022-6226 : Security Advisory - cri-o - CVE-2023-6476

Created: Jan 9, 2024 Updated: Dec 7, 2025

Resolved Date: Nov 24, 2025

Found In Version: 10.22.33.1

Fix Version: 10.22.33.23

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.

CVEs

CVE-2023-6476