CVE-2026-25804Antrea has invalid enforcement order for network policy rules caused by integer overflow

Descripción

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9 PatchVendor Advisory
• https://github.com/antrea-io/antrea/pull/7496 Issue TrackingPatch
• https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa Patch