Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Node DOS vulnerability in Kubernetes [CVE-2025-0426]

Summary IBM Watson Speech Services Cartridge is vulnerable to a Node DOS vulnerability in Kubernetes, due to a flaw in the kubelet read-only HTTP endpoint CVE-2025-0426. Kubernetes is used in our speech-utilities. This vulnerabilitiy has been addressed. Please read the details for remediation...

OESA-2025-1273 kubernetes security update

Container cluster management. Security Fixes: A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.CVE-2025-0426...

CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1

CVE-2025-0426 affecting package kubernetes for versions less than 1.30.10-1. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: RHODF-4.18-RHEL-9 enhancement, bug fix and security update

Updated images that include numerous enhancements, security, and bug fixes are now available for Red Hat OpenShift Data Foundation 4.18.0 on Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...

kubernetes1.32-apiserver-1.32.2-1.1 on GA media (moderate)

kubernetes1.32-apiserver-1.32.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14819-1 Rating: moderate Cross-References: CVE-2025-0426 CVSS scores: CVE-2025-0426 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-0426 SUSE : 6.9...

kubernetes1.30-apiserver-1.30.10-1.1 on GA media (moderate)

kubernetes1.30-apiserver-1.30.10-1.1 on GA media Announcement ID: openSUSE-SU-2025:14817-1 Rating: moderate Cross-References: CVE-2025-0426 CVSS scores: CVE-2025-0426 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-0426 SUSE : 6.9...

kubernetes1.31-apiserver-1.31.6-1.1 on GA media (moderate)

kubernetes1.31-apiserver-1.31.6-1.1 on GA media Announcement ID: openSUSE-SU-2025:14818-1 Rating: moderate Cross-References: CVE-2025-0426 CVSS scores: CVE-2025-0426 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-0426 SUSE : 6.9...

kubernetes1.29-apiserver-1.29.14-1.1 on GA media (moderate)

kubernetes1.29-apiserver-1.29.14-1.1 on GA media Announcement ID: openSUSE-SU-2025:14816-1 Rating: moderate Cross-References: CVE-2025-0426 CVSS scores: CVE-2025-0426 SUSE : 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-0426 SUSE : 6.9...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: rancher-agent, argocd-image-updater, rancher-fleet, kubernetes, kubernetes-csi-driver-hostpath, argo-cd, kapp-fips, spark-operator, azuredisk-csi, spark-operator-fips, azuredisk-csi-fips, kubernetes-csi-driver-nfs-fips, rancher-webhook, aws-ebs-csi-driver-fips,...

CVE-2025-0426 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook, emissary, nodetaint, kubernetes, kubernetes-csi-driver-nfs, aws-efs-csi-driver, yunikorn-k8shim, local-static-provisioner, node-feature-discovery, kubernetes-dns-node-cache, kapp, spark-operator, rancher-fleet, ip-masq-agent,...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...