CVE catalog

CVE-2024-7598

kubernetes: CVE-2024-7598

Severity: Low · CVSS 3.1CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Published: Jan 1, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.32% · Oct 25, 2026

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	kubernetes	sid	`1.36.4+ds-1`	fixed
Debian	kubernetes	forky	`1.36.4+ds-1`	fixed
Debian	kubernetes	trixie	`1.32.3+ds-2`	fixed
Debian	kubernetes	bookworm	`1.20.5+really1.20.2-1.1+deb12u1`	fixed
Opensuse	govulncheck-vulndb	tumbleweed	`0.0.20250327T184518-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	kubernetes	source	sid	`1.20.5+really1.20.2-1`	not yet assigned	Not reported	Not reported
Debian	kubernetes	source	forky	`1.20.5+really1.20.2-1`	not yet assigned	Not reported	Not reported
Debian	kubernetes	source	trixie	`1.20.5+really1.20.2-1`	not yet assigned	Not reported	Not reported
Debian	kubernetes	source	bookworm	`1.20.5+really1.20.2-1`	not yet assigned	Not reported	Not reported
Opensuse	govulncheck-vulndb	rpm	tumbleweed	`0.0.20250327T184518-1.1`	Not reported	OPENSUSE-SU-2025:14937-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[kubernetes-client]Fixed
Source package: [kubernetes]
Details (2)
- 1.20.5+really1.20.2-1.1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12
- 1.20.5+really1.20.2-1.1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · bookworm; dsa · kubernetes · debian · 12

[Debian 13 (Trixie)]

[golang-k8s-kubectl-dev]Fixed
Source package: [kubernetes]
Details (2)
- 1.32.3+ds-2 · all · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13
- 1.32.3+ds-2 · all · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13
[kubectl]Fixed
Source package: [kubernetes]
Details (2)
- 1.32.3+ds-2 · amd64 · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13
- 1.32.3+ds-2 · arm64 · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13
[kubernetes-client]Fixed
Source package: [kubernetes]
Details (2)
- 1.32.3+ds-2 · amd64 · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13
- 1.32.3+ds-2 · arm64 · trixie
  Fixed · Fixed: 1.20.5+really1.20.2-1
  dsa · kubernetes · debian · 13

[openSUSE Tumbleweed]

[govulncheck-vulndb]Fixed
Source package: [govulncheck-vulndb]
Details (1)
- 0.0.20260828T144745-1.1 · noarch · tumbleweed
  Fixed · Fixed: 0.0.20250327T184518-1.1
  dsa · govulncheck-vulndb · opensuse · tumbleweed

Observed: Oct 24, 2026, 11:27:14 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]