CVE-2026-35469

Recent updates for openSUSE Kubernetes have addressed significant denial of service vulnerabilities, specifically CVE-2026-33814 and CVE-2026-35469. CVE-2026-33814, published on May 7, 2026, involves an infinite loop in HTTP/2 transport when bad SETTINGS_MAX_FRAME_SIZE is provided. CVE-2026-35469, p...

SUSE KubeVirt 1.6 has been updated to address multiple vulnerabilities, including CVE-2026-9804, which allows symlink escape in the VMExport directory, enabling attackers to access sensitive files. CVE-2025-14525 poses a denial of service risk by allowing VMs to flood VMI status, potentially filling...