CVE-2026-25804

Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - security-advisories@github.com

Published

2026-02-06

Last modified

2026-02-09

Weaknesses

CWE-287, CWE-770

Affected products

• Antrea (Antrea-io)
• Antrea (Linuxfoundation)

References

• https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa
• https://github.com/antrea-io/antrea/pull/7496
• https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9