Description
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kubernetes | Kubernetes | kubelet v1.22.0 - v1.22.13 – < v1.22.14, kubelet v1.23.0 - v1.23.10 – < v1.23.11, kubelet v1.24.0 - v1.24.4 – < v1.24.5 | v1.22.14 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | kubernetes1.23 | 1.23.17-150300.7.6.1 | SUSE-SU-2023:2292-1 |
| SLES 15 SP3 | kubernetes1.23 | 1.23.17-150300.7.6.1 | SUSE-SU-2023:2292-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP3 | kubernetes1.23 | 1.23.17-150300.7.6.1 | SUSE-SU-2023:2292-1 |
| SLE HPC 15 SP3 | kubernetes1.23 | 1.23.17-150300.7.6.1 | SUSE-SU-2023:2292-1 |
| SUSE Enterprise Storage 7.1 | kubernetes1.23 | 1.23.17-150300.7.6.1 | SUSE-SU-2023:2292-1 |
Advisories 2
- SUSE-SU-2023:2292-1 Security update for kubernetes1.23 SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2022-1458 Kubernetes: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 15, 2023