CVE-2025-29478 An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Two CVEs Identified in Fluent-Bit v3.7.2 Allow Local Denial of Service Attacks CVE-2025-29478 and CVE-2025-29477 are vulnerabilities in fluent-bit version 3.7.2 that allow local attackers to cause a denial of service. The first issue relates to the cfl_list_size in cfl_list.h:165, while the second involves the consume_event function. Both vulnerabilities have been documented by Microsoft. 2 sources 33