CVE-2023-6476 (published 2024-01-09T21:32:03.407Z)
A flaw was found in CRI-O that involves an experimental annotation leading to a container being unconfined. This may allow a pod to specify and get any amount of memory/cpu, circumventing the kubernetes scheduler and potentially resulting in a denial of service in the node.
Affected products: Vendor: n/a
Product: kernel