CVE-2026-10722
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
ebpf
- Vendor
- cilium
- Product
- ebpf
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.6 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.11 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.14 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.15 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.16 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.17 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.20 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0.21.0 | affected | Unavailable | Unavailable | Unavailable | None listed |