CSRRW	X0, CYCLE, X5				// f31200c0
	CSRRW	X0, CYCLE, X0				// 731000c0
	CSRRW	X10, CYCLE, X5				// f31205c0
	CSRRW	$2, TIME, X5				// f35211c0
	CSRRWI	$2, TIME, X5				// f35211c0

	// 8.1: Base Counters and Timers (Zicntr)
	RDCYCLE		X5				// f32200c0
	RDTIME		X5				// f32210c0
	RDINSTRET	X5				// f32220c0

	// 10.1: Zihintpause Extension for Pause Hint
	PAUSE						// 0f000001

  - kubelet <= v1.19.14

**Fixed Versions**:
  - kubelet v1.22.2
  - kubelet v1.21.5
  - kubelet v1.20.11
  - kubelet v1.19.15

This vulnerability was reported by Fabricio Voznika and Mark Wolters of Google.

**CVSS Rating:** High (8.8) [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H](https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

## Changes by Kind

### Feature

music
musica.ar
musica.bo
musician.io
mutsu.aomori.jp
mutsuzawa.chiba.jp
mutual.ar
mv
mw
mw.gov.pl
mwcloudnonprod.com
mx
my
my-firewall.org
my-gateway.de
my-router.de
my-vigor.de
my-wan.de
my.eu.org
my.id
myactivedirectory.com
myamaze.net
myasustor.com
mycloudnas.com
mydatto.com
mydatto.net
mydbserver.com
myddns.rocks

music
musica.ar
musica.bo
musician.io
mutsu.aomori.jp
mutsuzawa.chiba.jp
mutual.ar
mv
mw
mw.gov.pl
mwcloudnonprod.com
mx
my
my-firewall.org
my-gateway.de
my-router.de
my-vigor.de
my-wan.de
my.eu.org
my.id
myactivedirectory.com
myamaze.net
myasustor.com
mycloudnas.com
mydatto.com
mydatto.net
mydbserver.com
myddns.rocks

$blue, $mid-color: $purple, $color-stop: 50%, $end-color: $red) {\n  background-image: linear-gradient($start-color, $mid-color $color-stop, $end-color);\n}\n\n@mixin gradient-radial($inner-color: $gray-700, $outer-color: $gray-800) {\n  background-image: radial-gradient(circle, $inner-color, $outer-color);\n}\n\n@mixin gradient-striped($color: rgba($white, .15), $angle: 45deg) {\n  background-image: linear-gradient($angle, $color 25%, transparent 25%, transparent 50%, $color 50%, $color 75%, transparent...

* vSphere kube-up: Wait for cbr0 configuration to complete before setting up routes. ([#35232](https://github.com/kubernetes/kubernetes/pull/35232), [@kerneltime](https://github.com/kerneltime))

- Cloud Controller Manager now exports the counter metric `route_controller_route_sync_total`, which increments each time routes are synced with the cloud provider. This metric is in alpha stage. ([#136539](https://github.com/kubernetes/kubernetes/pull/136539), [@lukasmetzner](https://github.com/lukasmetzner)) [SIG API Machinery, Cloud Provider and Instrumentation]

  * Clean up blackhole routes when using kubenet ([#47572](https://github.com/kubernetes/kubernetes/pull/47572), [@justinsb](https://github.com/justinsb))

- Fix route conflicted operations when updating multiple routes together ([#88209](https://github.com/kubernetes/kubernetes/pull/88209), [@feiskyer](https://github.com/feiskyer)) [SIG Cloud Provider]

* Orphaned routes are properly removed from terminated instances. ([#56258](https://github.com/kubernetes/kubernetes/pull/56258), [@databus23](https://github.com/databus23))