CVE-2019-14891: Fedoraproject Fedora

Medium severity, CVSS 5.0. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed if a workload process triggers an out-of-memory (OOM) condition for the cgroup. An attacker could abuse this flaw to get host network access on an cri-o host.

Affected products

• Fedoraproject Fedora: affected versions not specified
• Kubernetes Cri-O: before 1.16.1 (fixed in 1.16.1)
• Red Hat Openshift Container Platform: version 3.11 only; version 4.1 only; version 4.2 only

Published 2019-11-25. Last modified 2026-06-17.