Sensitive Information Disclosure

routesrv is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the lack of authentication on HTTP endpoints exposing routing and cache topology data, which allows an attacker with network access to retrieve sensitive cluster-wide configuration and infrastructure informati...

PT-2026-60892

Name of the Vulnerable Software and Affected Versions Skipper affected versions not specified Description The routesrv component exposes sensitive cluster-wide routing and cache infrastructure data over plain HTTP without any authentication. This allows any pod within the Kubernetes cluster to...

SUSE CVE-2024-56617

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Allocate memory during CPU hotplug if not done from the primary CPU Commit 5944ce092b97 "archtopology: Build cacheinfo from primary CPU" adds functionality that architectures can use to optionally allocate and build...