Database/Container, Kubernetes & orchestration
Cilium: On agent start, eBPF programs are briefly detached, so traffic bypasses NetworkPolicy
CVE-2023-27595Container, Kubernetes & orchestrationcurated
Impact
On agent start, eBPF programs are briefly detached, so traffic bypasses NetworkPolicy
Who can reach it
Any pod on the cluster network during an agent restart
What to do
Upgrade Cilium; note that every agent restart, including your own upgrades, is a policy-gap window
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.