Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-10722

cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

cilium ebpf

  • 0.1affected
  • 0.2affected
  • 0.3affected
  • 0.4affected
  • 0.5affected
  • 0.6affected
  • 0.7affected
  • 0.8affected
  • 0.9affected
  • 0.10affected
  • 0.11affected
  • 0.12affected
  • 0.13affected
  • 0.14affected
  • 0.15affected
  • 0.16affected
  • 0.17affected
  • 0.18affected
  • 0.19affected
  • 0.20affected
  • 0.21.0affected

References