https://seclists.org/oss-sec/2025/q1/234: [kubernetes] CVE-2024-7598: Network striction bypass via race condition during namespace termination
Published Mar 20, 2025
·Updated
Affected Software
1 affected component
Kubernetes kube-apiserver>=v1.3
Frequently Asked Questions
1
What is the severity of CVE-2024-7598?
CVE-2024-7598 has been classified as a medium severity vulnerability.
2
How does CVE-2024-7598 affect Kubernetes security?
CVE-2024-7598 allows a malicious pod to potentially bypass network restrictions during the termination of a namespace.
3
How do I fix CVE-2024-7598?
To mitigate CVE-2024-7598, it is advisable to apply the latest Kubernetes patches that address this vulnerability.
4
What versions of Kubernetes are affected by CVE-2024-7598?
CVE-2024-7598 affects specific releases of Kubernetes, particularly those prior to the security updates that resolve this issue.
5
Is there a workaround for CVE-2024-7598?
Currently, implementing stricter controls during namespace termination may serve as a temporary workaround for CVE-2024-7598.