Red Hat Bug Fix Advisory: OpenShift Container Platform 4.8.34 packages update
cri-o: pod with access to 'hostIPC' and 'hostNetwork' kernel namespace allows sysctl from the list of safe sysctls to be applied to the host
cpe:/a:redhat:openshift:4.8::el7 cpe:/a:redhat:openshift:4.8::el8