Kubernetes Nil pointer dereference in KCM after v1 HPA patch request

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-0793 · ADVISORY
• kubernetes/kubernetes · WEB
• openshift/kubernetes#1876 · WEB
• access.redhat.com/errata/RHSA-2024:0741 · WEB
• access.redhat.com/errata/RHSA-2024:1267 · WEB
• access.redhat.com/security/cve/CVE-2024-0793 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• kubernetes/kubernetes · PACKAGE
• pkg.go.dev/vuln/GO-2024-3277 · WEB
• GitHub Advisory GHSA-h7wq-jj8r-qm7p · ADVISORY

k8s.io/kubernetes のその他の脆弱性

• CVE-2025-13281中 5.8A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass…
• CVE-2025-5187中 6.7A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding no…
• CVE-2025-4563低 2.7A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks. …
• CVE-2024-7598低 3.1A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network pol…
• CVE-2025-1767中 6.5This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same …