CVE-2025-0426

Publication date 13 February 2025

Last updated 19 February 2025

Ubuntu priority

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node’s disk.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
kubernetes	24.10 oracular	Needs evaluation
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation
	20.04 LTS focal	Needs evaluation

How can I get the fixes?
What do statuses mean?

Notes

leosilva

kubernates is in fact a kubernetes installer that calls snap, not the package it self.

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.cve.org/CVERecord?id=CVE-2025-0426
http://www.openwall.com/lists/oss-security/2025/02/13/1
https://github.com/kubernetes/kubernetes/issues/130016
https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8
https://github.com/kubernetes/kubernetes/pull/130014