GHSA-h7wq-jj8r-qm7pHighCVSS 7.7

Kubernetes Nil pointer dereference in KCM after v1 HPA patch request

Published
November 17, 2024
Last Modified
November 19, 2024

🔗 CVE IDs covered (1)

CVE-2024-0793 →

📋 Description

A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

🎯 Affected products1

  • go/k8s.io/kubernetes:< 1.27.0-alpha.1

🔗 References (9)