CVE-2026-25804 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment syst…
High CVSS: 8.0

CVE-2026-25804

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.
Vendor
Linuxfoundation
Product
Antrea
CWE
CWE-287
Yayın Tarihi
2026-02-06 23:15:55
Güncelleme
2026-02-28 00:30:06
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-287 Antrea HIGH Linuxfoundation 2026

Referanslar

https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa https://github.com/antrea-io/antrea/pull/7496 https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9