CVE-2026-122322: Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.
Event History
Frequently Asked Questions
Which deployments are exposed to this denial-of-service issue?
Kyverno versions from 1.11.0 up to, but not including, 1.19.2 are affected. Exposure requires Kyverno to process Notary attestation data from registry referrer artifacts.
What does an attacker need to exploit it?
An attacker needs the ability to control registry referrer artifacts and supply a gzip-compressed predicate layer whose decompressed size exceeds maxPayloadSize. No authentication or user interaction is required according to the provided severity vector.
What is the operational impact of successful exploitation?
Processing the crafted attestation layer can exhaust memory in the admission controller, causing OOM kills and denial of service. The provided vector indicates availability impact only, with no stated confidentiality or integrity impact.
What version should be used to remediate the issue?
Upgrade Kyverno to version 1.19.2 or later. The provided data does not identify an alternative mitigation for environments that cannot patch immediately.