Cilium 访问控制错误漏洞

Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. An Access Control Error vulnerability exists in Cilium versions prior to...

PT-2025-48349

Name of the Vulnerable Software and Affected Versions Cilium versions prior to 1.16.17 Cilium versions prior to 1.17.10 Cilium versions prior to 1.18.4 Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. CiliumNetworkPolicys utilizing...

SUSE CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

EUVD-2025-150391

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

Linux Distros Unpatched Vulnerability : CVE-2025-40183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress...

DEBIAN-CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

UBUNTU-CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

CVE-2025-40183 bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadatadst leak bpfredirectneighv4,6 Cilium has a BPF egress gateway feature which forces outgoing K8s Pod traffic to pass through dedicated egress gateways which then SNAT the traffic in order to interact with stable I...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, ip-masq-agent, rancher-helm, dfc, otel-cli, xeol, pguser, spegel, kubernetes-event-exporter, custom-pod-autoscaler-operator, yunikorn-web, oras, nerdctl, sbom-scorecard, timestamp-authority, whereabouts, docker-credential-acr-env, go-bindata,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls, dynamic-localpv-provisioner, spire-controller-manager,...

GHSA-HJX7-FPXX-MJ48 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

GHSA-CXQ7-XW9V-RCV3 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

GHSA-9GCR-GP5F-JW27 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, spqr, licenseclassifier, mesosphere-vsphere-csi, otel-cli, vault-secrets-webhook, terraform-provider-tls, dynamic-localpv-provisioner, spire-controller-manager,...

CVE-2025-58186 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

CVE-2025-61723 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...

CVE-2025-58185 vulnerabilities

Vulnerabilities for packages: wave, sops, harbor, thanos-operator, bom, mc, ip-masq-agent, rancher-helm, spiffe-helper, dfc, kind, secrets-store-csi-driver-provider-gcp, licenseclassifier, mesosphere-vsphere-csi, otel-cli, spqr, vault-secrets-webhook, terraform-provider-tls,...