Homepage

CVE-2025-5187 Affecting kubernetes package, versions <1.20.5+really1.20.2-1

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN11-KUBERNETES-12226020
  • published29 Aug 2025
  • disclosed27 Aug 2025
Report a new vulnerability Found a mistake?

Introduced: 27 Aug 2025

NewCVE-2025-5187  (opens in a new tab)

How to fix?

Upgrade Debian:11 kubernetes to version 1.20.5+really1.20.2-1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kubernetes package and not the kubernetes package as distributed by Debian. See How to fix? for Debian:11 relevant fixed versions and status.

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently deleted, the given node object will be deleted via garbage collection.