Support Content Notification - Support Portal

Product Release Advisory - Stemcells (Ubuntu Noble) 1.126.x - noble-stemcell-google

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36519

Last Updated

23 November 2025

Initial Publication Date

23 November 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.4

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Stemcells (Ubuntu Noble) 1.126.x

	Highest Score CVE from list below advisory details
Severity	Critical
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS V3.1 Score	9.4 (Sev: CRITICAL)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" it is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
noble-stemcell-google	CVE-2025-4517 (Critical) CVE-2024-5535 (Critical) CVE-2024-8088 (High) CVE-2024-9287 (High) CVE-2025-9230 (High) CVE-2025-8194 (High) CVE-2025-4435 (High) CVE-2025-4330 (High) CVE-2025-4138 (High) CVE-2024-7592 (High) CVE-2024-6232 (High) CVE-2024-6119 (High) CVE-2024-4741 (High) CVE-2024-4032 (High) CVE-2024-12254 (High) CVE-2025-0938 (Medium) CVE-2025-4516 (Medium) CVE-2024-50602 (Medium) CVE-2024-2511 (Medium) CVE-2024-6923 (Medium) CVE-2024-4603 (Medium) CVE-2024-12718 (Medium) CVE-2023-27043 (Medium) CVE-2025-6069 (Medium) CVE-2024-9143 (Medium) CVE-2024-13176 (Medium)

Component

Vulnerabilities Resolved

noble-stemcell-google