Red Hat issued a security advisory (RHSA-2025:21892) for Submariner v0.21, which implements KEP-1645 to enable direct networking between pods and services across Kubernetes clusters. The advisory addresses multiple vulnerabilities including CVE-2025-47950 and CVE-2025-59530, with a moderate security impact rating. A notable fix is for a race condition in the RouteAgent component that could cause Submariner to become degraded. The advisory provides updated container images and references the upstream Submariner release notes for details. The fixes are delivered as part of Red Hat Advanced Cluster Management for Kubernetes v2.14. No CVSS base score is published for these vulnerabilities.

The vulnerabilities addressed could lead to Submariner operator degradation due to a race condition in RouteAgent, potentially impacting cross-cluster connectivity for Kubernetes services and pods. The overall security impact is rated moderate by Red Hat. There is no indication of known exploits in the wild. The impact is limited to environments using Submariner v0.21 within Red Hat Advanced Cluster Management for Kubernetes.

Red Hat has released updated container images and security fixes as part of Red Hat Advanced Cluster Management for Kubernetes v2.14, which includes the Submariner v0.21 updates. Users should apply this update to remediate the vulnerabilities. Since this is a traditional software product (not a cloud service), remediation requires deploying the updated versions as provided by Red Hat. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified beyond applying the official update.