{"id":"AZL-112351","summary":"CVE-2025-0750 affecting package conmon 2.1.8-1","details":"A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.","modified":"2026-11-03T05:33:06Z","published":"2025-01-28T10:15:09Z","upstream":["CVE-2025-0750"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0750"}],"affected":[{"package":{"name":"conmon","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/conmon"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.1.8-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112351.json"}}],"schema_version":"1.9.2"}