Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25804 Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has… https://www.cve.org/CVERecord?id=CVE-2026-25804
Post summary
The snippet announces CVE‑2026‑25804 affecting Antrea before certain releases, offering minimal technical context and no evidence of exploitation or mitigation.
CVE-2026-25804: Antrea Integer Overflow: When 65536 Equals 0 (and Admin Rules Don't Matter) A critical integer overflow vulnerability in Antrea's priority assignment logic allows low-priority network policies to wrap around and supersede high-priority... https://cvereports.com/reports/CVE-2026-25804
Post summary
The post announces CVE‑2026‑25804, detailing an integer overflow in Antrea’s priority logic that permits low‑priority policies to override higher ones.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | linuxfoundation | antrea | - | kubernetes | - |