CVE-2026-24834: Kata Containers RCE Vulnerability

CVE-2026-24834 Overview

CVE-2026-24834 is a critical Local Code Execution vulnerability affecting Kata Containers, an open source project that provides a standard implementation of lightweight Virtual Machines (VMs) designed to perform like containers. In versions prior to 3.27.0, a security flaw in Kata Containers when used with Cloud Hypervisor allows a container user to modify the file system used by the Guest micro VM, ultimately achieving arbitrary code execution as root within that VM.

The vulnerability stems from improper permission settings (CWE-732) in the VM rootfs driver configuration. While the current understanding suggests this issue doesn't impact the security of the Host system or other containers/VMs running on the same Host, it represents a significant privilege escalation vector within the container environment. Additionally, it's important to note that arm64 QEMU lacks NVDIMM read-only support, meaning a guest write could potentially reach the image file until upstream QEMU gains this capability.

Critical Impact
Container users can achieve arbitrary code execution as root within the Guest micro VM by exploiting improper file system permissions in Kata Containers with Cloud Hypervisor.

Affected Products

Kata Containers versions prior to 3.27.0
Kata Containers with Cloud Hypervisor configurations
arm64 QEMU deployments (partial impact due to missing NVDIMM read-only support)

Discovery Timeline

2026-02-19 - CVE CVE-2026-24834 published to NVD
2026-02-19 - Last updated in NVD database

Technical Details for CVE-2026-24834

Vulnerability Analysis

The vulnerability exists in how Kata Containers configures the VM rootfs driver when using Cloud Hypervisor. The problematic configuration uses virtio-pmem as the VM rootfs driver, which does not enforce proper read-only protections on the guest file system. This allows a user within the container to write to the file system that backs the Guest micro VM, leading to persistent modifications that can be leveraged to execute arbitrary code with root privileges.

The attack requires local access to the container environment but does not require prior privileges or user interaction. The scope is changed, meaning while the vulnerable component is the Kata runtime, the impacted component is the Guest VM where root code execution is achieved. The confidentiality, integrity, and availability impacts within the Guest VM are all high.

Root Cause

The root cause is an Improper Permission Assignment for Critical Resource (CWE-732). The virtio-pmem driver was being used for Cloud Hypervisor configurations, but this driver does not properly enforce read-only access to the backing rootfs image. This allows container users to modify files that should be immutable, ultimately achieving code execution as root within the VM.

The fix changes the VM rootfs driver from virtio-pmem to virtio-blk-pci, which provides proper block-level access controls and prevents unauthorized modifications to the guest file system.

Attack Vector

An attacker with access to a container running on Kata Containers with Cloud Hypervisor can exploit this vulnerability by writing to the Guest VM's file system. Since the virtio-pmem driver doesn't enforce read-only protections, these writes persist and affect the underlying rootfs image. The attacker can then modify system binaries, configuration files, or inject malicious code that executes with root privileges when the VM processes these modified files.

The attack is local in nature, requiring the attacker to have some level of access to the containerized environment. However, once access is obtained, the path to root code execution within the Guest VM is straightforward due to the lack of file system protections.

text

# Security patch in src/runtime-rs/Makefile
     KERNELTYPE_CLH = uncompressed
     KERNEL_NAME_CLH = $(call MAKE_KERNEL_NAME,$(KERNELTYPE_CLH))
     KERNELPATH_CLH = $(KERNELDIR)/$(KERNEL_NAME_CLH)
-    VMROOTFSDRIVER_CLH := virtio-pmem
+    VMROOTFSDRIVER_CLH := virtio-blk-pci

     DEFSANDBOXCGROUPONLY_CLH := true
     DEFSTATICRESOURCEMGMT_CLH := false

Source: GitHub Commit 6a67250

The patch replaces the vulnerable virtio-pmem driver with virtio-blk-pci, which enforces proper access controls on the rootfs image.

text

# Security patch in configuration-cloud-hypervisor.toml.in

 # Block storage driver to be used for the VM rootfs is backed
 # by a block device.
+#
+# virtio-pmem is not supported with Cloud Hypervisor.
 vm_rootfs_driver = "@VMROOTFSDRIVER_CLH@"

 # Path to the firmware.

Source: GitHub Commit 6a67250

Detection Methods for CVE-2026-24834

Indicators of Compromise

Unexpected modifications to Guest VM rootfs images or backing storage
Unauthorized file changes within container environments running on Kata Containers
Privilege escalation events within Guest VMs to root level
Anomalous write operations to virtio-pmem backed storage devices

Detection Strategies

Monitor for unexpected write operations to VM rootfs images in Kata Containers deployments
Implement file integrity monitoring on Guest VM file systems to detect unauthorized modifications
Review Kata Containers configuration files for use of virtio-pmem driver with Cloud Hypervisor
Audit container runtime logs for privilege escalation patterns or root-level command execution

Monitoring Recommendations

Enable comprehensive logging for Kata Containers runtime operations
Implement real-time alerting for modifications to critical system files within Guest VMs
Monitor for configuration changes to VM rootfs driver settings
Track and alert on any containers exhibiting unexpected file system write patterns

How to Mitigate CVE-2026-24834

Immediate Actions Required

Upgrade Kata Containers to version 3.27.0 or later immediately
Review all Kata Containers deployments using Cloud Hypervisor for exposure
Audit existing container workloads for signs of compromise before upgrading
For arm64 QEMU deployments, implement additional monitoring until upstream QEMU gains NVDIMM read-only support

Patch Information

The vulnerability is patched in Kata Containers version 3.27.0. The fix changes the VM rootfs driver from virtio-pmem to virtio-blk-pci for Cloud Hypervisor configurations, which properly enforces read-only access to the guest file system.

For detailed patch information, refer to:

Workarounds

Manually modify Kata Containers configuration to use virtio-blk-pci instead of virtio-pmem for Cloud Hypervisor deployments
Implement strict network segmentation and access controls for container environments
Deploy additional runtime security monitoring to detect exploitation attempts
Consider temporarily disabling Cloud Hypervisor configurations until patching is complete

bash

# Configuration workaround - modify vm_rootfs_driver in configuration file
# Edit /opt/kata/share/defaults/kata-containers/configuration-clh.toml or equivalent

# Change from:
# vm_rootfs_driver = "virtio-pmem"

# To:
vm_rootfs_driver = "virtio-blk-pci"

# Restart Kata Containers runtime after configuration change
systemctl restart kata-containers