REDHAT-BUG-2214402: High severity kubernetes/kube-controller-manager vulnerability

Published Jun 12, 2023

Updated

The problem in particular is with the annotation " autoscaling.alpha.kubernetes.io/behavior" when it doesn't have a definition for scaling up, The cluster accepts the manifest but it seems that it fills with "nil" the scale up portion and it causes the kube-controller-manager pods to crash and go into crashloopbackoff.

The logs of the kube-controller-manager component show an error referencing invalid memory address or nil pointer dereference which causes the pod to die.

Affected Software

1 affected component

kubernetes/kube-controller-manager

Event History

Jun 12, 2023

Data Sourced

via Red Hat·09:05 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2214402?

The severity of REDHAT-BUG-2214402 is high, rated at 7.

What causes the issue in REDHAT-BUG-2214402?

The issue in REDHAT-BUG-2214402 is caused by the annotation 'autoscaling.alpha.kubernetes.io/behavior' lacking a definition for scaling up.

How does REDHAT-BUG-2214402 affect kube-controller-manager?

REDHAT-BUG-2214402 causes kube-controller-manager pods to crash due to a nil value in the scale up portion when the annotation is improperly defined.

How can I fix REDHAT-BUG-2214402?

To fix REDHAT-BUG-2214402, ensure that the 'autoscaling.alpha.kubernetes.io/behavior' annotation includes a proper definition for scaling up.

What software is affected by REDHAT-BUG-2214402?

The affected software for REDHAT-BUG-2214402 is the kubernetes/kube-controller-manager.