vulnerability

Red Hat OpenShift: CVE-2024-0793: kube-controller-manager: malformed HPA v1 manifest causes crash

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
Mar 21, 2024
Added
Mar 21, 2024
Modified
Aug 11, 2025

Description

A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

Solution

linuxrpm-upgrade-openshift
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.