CVE-2024-0793

What it actually does

The flaw causes denial of service when an HPA config YAML lacking a .spec.behavior.scaleUp block is initially applied, leading to kube-controller-manager pods entering restart churn.

Why it matters to the business

This can result in instability and downtime for Kubernetes cluster management, affecting application scaling and availability. Low urgency as the issue is not known to be exploited in ransomware or KEV-listed campaigns and has shown no EPSS increase over 30 days.

How an attack unfolds

An attacker or misconfigured deployment applies an HPA YAML lacking the scaleUp behavior block to a cluster, triggering the controller manager to enter a restart loop and denying service to dependent workloads. Mentioned threat actor context around HTTP/2 Rapid Reset is unrelated to this flaw.

How to fix it

Upgrade affected kube-controller-manager deployments to versions that properly handle missing scaleUp blocks in initial HPA application. No fixed versions listed for the described component; bind9 entries appear unrelated to this CVE.

How to confirm the fix worked

Apply test HPA configurations both with and without the scaleUp block, confirm kube-controller-manager pods remain stable without churn, and review pod restart metrics and logs post-upgrade.

Typical attack path

1. Locate or craft an HPA configuration missing the .spec.behavior.scaleUp block
2. Apply the malformed configuration via the Kubernetes API
3. Observe repeated restarts of kube-controller-manager pods

How to detect it

Review kube-controller-manager pod logs and restart counts for patterns following HPA application events; inspect recently applied HPA YAML resources for absence of scaleUp behavior sections. No threat actor specific indicators apply.

What your security team should do

• Prioritize patching kube-controller-manager in all clusters
• Audit existing HPA manifests for missing behavior blocks
• Implement configuration validation in CI pipelines before applying HPA resources
• Monitor cluster health dashboards for controller pod restart rates