CVE-2024-42486

Name of the Vulnerable Software and Affected Versions Cilium versions 1.15.x through 1.15.7 Cilium version 1.16.0

Description The issue arises from incorrect propagation of ReferenceGrant changes in Cilium's GatewayAPI controller. This could lead to Gateway resources accessing secrets for longer than intended or Routes forwarding traffic to backends in other namespaces for longer than intended.

Recommendations For Cilium versions 1.15.x through 1.15.7, update to version 1.15.8. For Cilium version 1.16.0, update to version 1.16.1. As a temporary workaround, any modification of a related Gateway/HTTPRoute/GRPCRoute/TCPRoute CRD will trigger a reconciliation of ReferenceGrants on an affected cluster.