CVE-2020-2024: Katacontainers Runtime

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.

Affected products

• Katacontainers Runtime: before 1.11.0 (fixed in 1.11.0)

Published 2020-05-19. Last modified 2026-06-17.