Intel Device Plugins for Kubernetes Improper Access Control Vulnerability Allowing Denial-of-Service

A denial-of-service vulnerability has been identified in some Device Plugins for Kubernetes software maintained by Intel, prior to version 0.32.0. The issue arises from improper access control, which may allow a privileged user to disrupt services via local access.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing disruptions in the Kubernetes environment by potentially allowing a privileged user to interfere with the normal operation of the device plugins.

Remediation

Users are advised to update Intel Device Plugins for Kubernetes to version 0.32.0 or later. The latest releases can be downloaded from the Intel Device Plugins for Kubernetes GitHub repository.