GHSA-JGFP-53C3-624W Node Denial of Service via kubelet Checkpoint API

🗓️ 13 Feb 2025 18:32:33Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Node Denial of Service in Kubernetes due to excessive checkpoint requests filling disk space.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Node DOS vulnerability in Kubernetes [CVE-2025-0426]	31 Oct 202518:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities	31 Jul 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Netcool Operations Insights.	20 Nov 202516:20	–	ibm
AlpineLinux	CVE-2025-0426	13 Feb 202515:16	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: kubernetes (CVE-2025-0426)	22 Jan 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-0426	19 Aug 202500:00	–	nessus
BDU FSTEC	The vulnerability of the kubelet utility in the Kubernetes cluster management software allows a attacker to trigger a failure in the operation of the cluster.	9 Jun 202500:00	–	bdu_fstec
CBLMariner	CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1	13 Mar 202515:10	–	cbl_mariner
Chainguard	CVE-2025-0426 vulnerabilities	13 Feb 202516:16	–	cgr
Circl	CVE-2025-0426	13 Feb 202515:23	–	circl

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-0426
github	www.github.com/kubernetes/kubernetes/issues/130016
github	www.github.com/advisories/GHSA-jgfp-53c3-624w
github	www.github.com/kubernetes/kubernetes
groups	www.groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8
openwall	www.openwall.com/lists/oss-security/2025/02/13/1

04 Feb 2026 03:03Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.2

EPSS0.00364

kubernetes denial of service kubelet checkpoint api security issue.