~ / search / GHSA-h7wq-jj8r-qm7p

GHSA-h7wq-jj8r-qm7p

Kubernetes Nil pointer dereference in KCM after v1 HPA patch request

Source: GitHub Advisory Database (reviewed) High CVE-2024-0793

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/kubernetes < 1.27.0-alpha.1 1.27.0-alpha.1

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

References

External links from the advisory. They lead to third-party sites.