CVE-2023-5528

Publication Date: 2023/11/14 11:30 AM PDT

AWS is aware of CVE-2023-5528, an issue in Kubernetes. Amazon EKS optimized Windows AMIs are not affected by the issue because the Kubernetes local-storage storage class type is disabled on EKS Windows AMI.

As a security best practice, we recommend that EKS customers update their configurations to launch new worker nodes from the latest AMI version. Customers using Managed node groups can upgrade their node groups by referring to the EKS documentation. Please refer …

amazon amazon eks ami aware aws best practice class customers cve disabled eks issue kubernetes launch local nodes practice security storage update windows worker