A local privilege escalation vulnerability (CVE-2024-25621) exists in containerd due to overly permissive default directory permissions. Local users on the host can access the metadata store, content store, and Kubernetes local volumes, potentially exploiting setuid binaries to elevate privileges. The vulnerability affects Red Hat OpenShift AI 3.3 and other related Red Hat products that include containerd components. Red Hat has provided updated container images and documented manual mitigation steps involving restricting directory permissions or running containerd in rootless mode.

The vulnerability allows local users with access to the host to read and modify containerd metadata and content stores, including Kubernetes local volumes. This can lead to privilege escalation on the host system by leveraging setuid binaries found in these volumes. The impact includes confidentiality and integrity compromise of container data and potential full host privilege escalation.

Red Hat has released updated container images for Red Hat OpenShift AI 3.3 and related products to address this issue. Administrators should upgrade to these updated versions following Red Hat's documented upgrade instructions. As an immediate mitigation, system administrators can manually restrict permissions on containerd directories by running: chmod 700 /var/lib/containerd, chmod 700 /run/containerd/io.containerd.grpc.v1.cri, and chmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim. Alternatively, running containerd in rootless mode mitigates the risk. Check Red Hat's official advisory for detailed guidance.