CVE-2026-73500High

etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline

Published
August 23, 2026
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2026-73500 →

🎯 Affected products7

  • azl3 cert-manager 1.12.15-11 on Azure Linux 3.0
  • azl3 cloud-provider-kubevirt 0.5.1-6 on Azure Linux 3.0
  • azl3 flannel 0.24.2-29 on Azure Linux 3.0
  • azl3 keda 2.14.1-16 on Azure Linux 3.0
  • azl3 kube-vip-cloud-provider 0.0.10-7 on Azure Linux 3.0
  • azl3 kubernetes 1.30.10-27 on Azure Linux 3.0
  • azl3 prometheus-adapter 0.12.0-7 on Azure Linux 3.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 0.24.2-30 KBCBL-Mariner Releases (Security Update) — fixed build 2.14.1-17 KBCBL-Mariner Releases (Security Update) — fixed build 0.0.10-8 KBCBL-Mariner Releases (Security Update) — fixed build 1.30.10-28 KBCBL-Mariner Releases (Security Update) — fixed build 1.12.15-12 KBCBL-Mariner Releases (Security Update) — fixed build 0.5.1-7 KBCBL-Mariner Releases (Security Update) — fixed build 0.12.0-9

🔗 References (2)