Database/Container, Kubernetes & orchestration
Kubernetes (kube-apiserver): Nodes can bypass DRA authorization checks
CVE-2025-4563Container, Kubernetes & orchestrationcurated
Impact
Nodes can bypass DRA authorization checks. Directly relevant: DRA is how GPUs are allocated in modern clusters
Who can reach it
A compromised node / kubelet credential
What to do
Rolling control-plane upgrade; no GPU drain, but re-audit DRA ResourceClaim allocations
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.