Skip to main content

One post tagged with "Azure Kubernetes Fleet Manager"

Azure Kubernetes Fleet Manager for multi-cluster management and governance.

View All Tags

Apply Copy Fail and DirtyFrag CVE mitigations at-scale using Azure Kubernetes Fleet Manager

· 11 min read
Simon Waight
Simon Waight
Product Manager for Azure Kubernetes Fleet Manager

This post shows how to use Azure Kubernetes Fleet Manager to simplify the safe rollout of mitigations for CVE-2026-31431 ("Copy Fail") and CVE-2026-43284 / CVE-2026-43500 ("DirtyFrag") across multiple AKS clusters. This vulnerability allows a container to escalate to root on the node and impacts AKS Linux nodes until mitigations are applied. Existing nodes require either a node image upgrade or a self-service DaemonSet mitigation.