AZL-97479

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-97479.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-97479

Upstream

CVE-2026-77176

Published

2026-08-20T17:19:49Z

Modified

2026-09-01T05:28:09Z

Summary

CVE-2026-77176 affecting package kata-containers 3.32.0.kata0-2

Details

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary content, potentially exposing confidential information or enabling the acceptance of attacker-controlled input.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-77176

Affected packages

Azure Linux:3 / kata-containers

Package

Name: kata-containers
Purl: pkg:rpm/azure-linux/kata-containers

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

3.32.0.kata0-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-97479.json"