Champ-Goblem

**Name of the Vulnerable Software and Affected Versions** Cilium versions prior to 1.17.14 Cilium versions 1.18.0 through 1.18.7 Cilium versions 1.19.0 through 1.19.1 **Description** Cilium is a networking, observability, and security solution utilizing an eBPF-based dataplane. Ingress Network Policies are not enforced for traffic originating from pods destined for L7 Services (Envoy, GAMMA) with a local backend residing on the same node when Per-Endpoint Routing is enabled and BPF Host Routing is disabled. Per-Endpoint Routing is enabled automatically in deployments employing cloud IPAM, including Cilium ENI on EKS (`eni.enabled`), AlibabaCloud ENI (`alibabacloud.enabled`), Azure IPAM (`azure.enabled`, excluding AKS BYOCNI), and certain GKE deployments (`gke.enabled`). This issue primarily impacts Amazon EKS with Cilium ENI mode. The affected API endpoints are L7 Services such as `/api/v1/login` and `/users/{id}`. The vulnerable parameter is the destination IP address of the traffic. **Recommendations** Versions prior to 1.17.14: Upgrade to version 1.17.14 or later. Versions 1.18.0 through 1.18.7: Upgrade to version 1.18.8 or later. Versions 1.19.0 through 1.19.1: Upgrade to version 1.19.2 or later.

**Name of the Vulnerable Software and Affected Versions** Kata Containers versions prior to 3.26.0 **Description** Kata Containers is an open source project that implements lightweight Virtual Machines (VMs) functioning like containers. A flaw exists where, when processing a malformed or empty container image, containerd resorts to bind-mounting an empty snapshotter directory for the container rootfs. This causes the Kata runtime to identify the rootfs as a block device, triggering hotplugging of the underlying device within the guest. This can result in filesystem-level errors on the host, including double inode allocation, potentially leading to the host's block device being mounted as read-only. The issue can cause denial of service and a risk of system integrity compromise. **Recommendations** Versions prior to 3.26.0 should be updated to version 3.26.0 or later.