{"id":"AZL-110333","summary":"CVE-2025-0750 affecting package cri-o 1.30.1-1","details":"A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.","modified":"2026-10-24T05:31:11Z","published":"2025-01-28T10:15:09Z","upstream":["CVE-2025-0750"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0750"}],"affected":[{"package":{"name":"cri-o","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/cri-o"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.30.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110333.json"}}],"schema_version":"1.9.0"}