A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network
    restrictions enforced by network policies during namespace deletion. The order in which objects are
    deleted during namespace termination is not defined, and it is possible for network policies to be deleted
    before the pods that they protect. This can lead to a brief period in which the pods are running, but
    network policies that should apply to connections to and from the pods are not enforced. (CVE-2024-7598)

An update of the kubernetes package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network     restrictions enforced by network policies during namespace deletion. The order in which objects are     deleted during namespace termination is not defined, and it is possible for network policies to be deleted     before the pods that they protect. This can lead to a brief period in which the pods are running, but     network policies that should apply to connections to and from the pods are not enforced. (CVE-2024-7598)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
465544	Echo: k8s.io/kubernetes: security update to 1.3.0	Tenable Cloud Security	Echo Local Security Checks	Local	low
465544	Echo: k8s.io/kubernetes: security update to 1.3.0	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	low
333757	Photon OS 5.0: Kubernetes PHSA-2025-5.0-91-0698	Nessus	PhotonOS Local Security Checks	Local	medium
278947	Photon OS 5.0: Kubernetes PHSA-2025-5.0-0698	Nessus	PhotonOS Local Security Checks	Local	medium
258282	Linux Distros Unpatched Vulnerability : CVE-2024-7598	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2024-7598

low

Tenable Plugins

low

low

medium

medium

low