VYPR
← All advisories
Moderate severityNVD Advisory· Published Aug 15, 2024· Updated Aug 19, 2024

Cilium agent's race condition may lead to policy bypass for Host Firewall policy

CVE-2024-42488

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in the Cilium agent can cause the agent to ignore labels that should be applied to a node. This could in turn cause CiliumClusterwideNetworkPolicies intended for nodes with the ignored label to not apply, leading to policy bypass. This issue has been patched in Cilium v1.14.14 and v1.15.8 As the underlying issue depends on a race condition, users unable to upgrade can restart the Cilium agent on affected nodes until the affected policies are confirmed to be working as expected.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/cilium/ciliumGo
< 1.14.141.14.14
github.com/cilium/ciliumGo
>= 1.15.0, < 1.15.81.15.8

Affected products

62

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.