CVE-2023-2431
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Bypass of seccomp profile enforcement
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Kubernetes
- Vendor
- Kubernetes
- Product
- Kubernetes
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | kubelet v1.24 | v1.24.14 | Unavailable | None listed |
| v1.25.0 | affected | kubelet v1.25 | v1.25.9 | Unavailable | None listed |
| v1.26.0 | affected | kubelet v1.26 | v1.26.4 | Unavailable | None listed |
| v1.27.0 | affected | kubelet v1.27 | v1.27.1 | Unavailable | None listed |