CVE-2026-92574

CVE CVE-2026-92574EUVD EUVD-2026-83881Published 2026-09-21T09:49:49.000ZLast changed 2026-09-21T15:36:29.000ZCVSS 8.8

What the advisory describes

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, no_new_privs, and seccomp state from the checkpoint instead of enforcing the destination configuration. This can allow execution with elevated privileges across the container security boundary. Affected upstream supported versions are CRI-O 1.34 and later. Downstream Red Hat products are affected from OCP 4.17 onward. Fixes have been applied to supported branches but are not yet released. Exploitation requires permission to create a pod from a malicious checkpoint image and checkpoint restore functionality to be available.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Red Hat — Confidential Compute Attestation
• Red Hat — Red Hat Enterprise Linux 8
• Red Hat — Red Hat Enterprise Linux 9
• Red Hat — Red Hat OpenShift Container Platform 4

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Red Hat — Red Hat Enterprise Linux
• Red Hat — Red Hat OpenShift Container Platform

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.