VIR Vulnerability Intelligence Relay

CVE-2023-2431

unknown
Published 2023-06-16 · Modified 2026-02-04
CVSS v3
—
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v2
—
VIR risk
—

Description

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2023-2431

vendor Authored 2026-05-27

Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2023-2431.html

OS impact
OSVersionStatusFixed in
suse slesaffected
debian debianbookwormfixed1.20.5+really1.20.2-1
debian debianbullseyefixed1.20.5+really1.20.2-1
debian debianforkyfixed1.20.5+really1.20.2-1
debian debiansidfixed1.20.5+really1.20.2-1
debian debiantrixiefixed1.20.5+really1.20.2-1

Package impact
EcosystemPackageVulnerableFixed
golang Gok8s.io/kubernetes<1.24.141.24.14
golang Gok8s.io/kubernetes>=1.25.0,<1.25.101.25.10
golang Gok8s.io/kubernetes>=1.26.0,<1.26.51.26.5
golang Gok8s.io/kubernetes>=1.27.0,<1.27.21.27.2

References

Verify integrity in audit chain (admin only). AS-IS.