Skip to content
This repository was archived by the owner on Aug 7, 2025. It is now read-only.

Commit c817b8a

Browse files
committed
Add security note regarding CVE 2022-0185. [skip ci]
Signed-off-by: Cesar Talledo <[email protected]>
1 parent 8b1312a commit c817b8a

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

README.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,20 @@
11
<p align="center"><img alt="sysbox" src="./docs/figures/sysbox-ee-header.png" width="1000" /></p>
22

3+
***
4+
5+
**Security Note (01/21/22)**:
6+
7+
A vulnerability ([CVE 2022-0185](https://ubuntu.com/security/CVE-2022-0185)) was
8+
recently found in the Linux kernel, permitting a "User Namespace" escape (i.e.,
9+
an unprivileged user inside a user-namespace may gain root access to the
10+
host). This vulnerability affects containers deployed with Sysbox as they always
11+
use the Linux user-namespace for extra isolation. To mitigate it, check if your
12+
kernel distro carries the fix. For Ubuntu, the fix has been released and requires
13+
a [kernel update](https://ubuntu.com/security/notices/USN-5240-1). Reach out to the
14+
[Sysbox Slack channel][slack] for further questions.
15+
16+
***
17+
318
## Contents
419

520
* [Introduction](#introduction)

0 commit comments

Comments
 (0)