x/vulndb: potential Go vuln in github.com/cri-o/cri-o: CVE-2022-0811

[GoVulnBot]

In CVE-2022-0811, the reference URL github.com/cri-o/cri-o (and possibly others) refers to something in Go.

module: github.com/cri-o/cri-o
package: CRI-O
description: |
    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
cves:
  - CVE-2022-0811
links:
    context:
      - https://bugzilla.redhat.com/show_bug.cgi?id=2059475
      - https://github.com/cri-o/cri-o/security/advisories/GHSA-6x2m-w449-qwx7

See doc/triage.md for instructions on how to triage this report.

[julieqiu]

Vulnerability in tool

[gopherbot]

Change https://go.dev/cl/592767 mentions this issue: data/reports: unexclude 50 reports

[gopherbot]

Change https://go.dev/cl/607216 mentions this issue: data/reports: unexclude 20 reports (14)