Wind River Support Network

HomeDefectsLIN1023-3318

Fixed

LIN1023-3318 : Security Advisory - cri-o - CVE-2023-6476

Created: Jan 9, 2024 Updated: Oct 28, 2025

Resolved Date: Oct 19, 2025

Found In Version: 10.23.30.1

Fix Version: 10.23.30.19

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.

CVEs

CVE-2023-6476