Database/Container, Kubernetes & orchestration

Kubernetes (kubelet): Unauthenticated node DoS through the kubelet checkpoint API filling node disk

CVE-2025-0426Container, Kubernetes & orchestrationcurated

Impact

Unauthenticated node DoS through the kubelet checkpoint API filling node disk

Who can reach it

Any pod on the cluster network reaching the kubelet port

What to do

Rolling kubelet upgrade with node drain; disable the ContainerCheckpoint feature gate

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.