Low severity3.3NVD Advisory· Published Jun 3, 2026· Updated Jul 22, 2026
CVE-2026-10722
CVE-2026-10722
Description
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/cilium/ebpfGo | < 0.22.0 | 0.22.0 |
Affected products
178- osv-coords176 versionspkg:apk/chainguard/ctr-2.2pkg:apk/chainguard/delvepkg:apk/chainguard/auditbeat-9.3pkg:apk/chainguard/cilium-1.18-clustermesh-apiserverpkg:apk/chainguard/cilium-fips-1.18-host-utilspkg:apk/chainguard/cilium-fips-1.18-operator-awspkg:apk/chainguard/containerd-2.1pkg:apk/chainguard/containerd-shim-runc-v2-2.2pkg:apk/chainguard/ctr-2.3pkg:apk/chainguard/dockerd-fips-28pkg:apk/chainguard/elastic-otel-collector-9.4pkg:apk/chainguard/envoy-gateway-1.7-egctlpkg:apk/chainguard/envoy-gateway-fips-1.7-egctlpkg:apk/chainguard/falcoctlpkg:apk/chainguard/kumactl-2.10pkg:apk/chainguard/containerd-shim-runc-v2-2pkg:apk/wolfi/gitaly-19.1pkg:rpm/opensuse/cadvisor&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/auditbeat-fips-8.19pkg:apk/chainguard/cilium-1.18pkg:apk/chainguard/kumactl-2.9pkg:apk/wolfi/vitess-23-binariespkg:apk/chainguard/libnvidia-container-fipspkg:apk/chainguard/rke2-runtime-fips-1.34pkg:apk/chainguard/splunk-otel-collectorpkg:apk/wolfi/ctr-1pkg:apk/wolfi/ctr-2.3pkg:apk/chainguard/kumactl-2.14pkg:apk/chainguard/auditbeat-9.4pkg:apk/chainguard/cilium-1.18-operator-awspkg:apk/chainguard/k3spkg:apk/chainguard/k3s-1.35pkg:apk/chainguard/k3s-staticpkg:apk/chainguard/k3s-static-1.35pkg:apk/wolfi/containerd-shim-runc-v2-2pkg:apk/wolfi/k3spkg:apk/wolfi/k3s-1.35pkg:apk/wolfi/k3s-staticpkg:apk/wolfi/k3s-static-1.35pkg:rpm/opensuse/alloy&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/rke2-runtime-1.34pkg:apk/chainguard/virt-chroot-fips-1.9pkg:apk/wolfi/containerd-2.3pkg:apk/chainguard/kuma-cni-2.12pkg:apk/chainguard/vitess-24-binariespkg:apk/wolfi/falcoctlpkg:apk/chainguard/auditbeat-8.19pkg:apk/chainguard/auditbeat-9.2pkg:apk/chainguard/runcpkg:apk/chainguard/virt-chroot-1.9pkg:apk/wolfi/containerd-shim-runc-v2-2.3pkg:apk/wolfi/runcpkg:apk/chainguard/cilium-fips-1.18-hubble-relaypkg:apk/chainguard/containerd-2pkg:apk/chainguard/containerd-2.2pkg:apk/chainguard/containerd-shim-runc-v2-fipspkg:apk/chainguard/cosmo-routerpkg:apk/chainguard/rke2-runtime-fips-1.35pkg:apk/wolfi/k3s-1.34pkg:rpm/opensuse/cadvisor&distro=openSUSE%20Tumbleweedpkg:apk/chainguard/hubble-ui-backendpkg:apk/wolfi/kumactl-2.13pkg:apk/chainguard/agentbeat-fipspkg:apk/chainguard/containerd-shim-runc-v2-1pkg:apk/chainguard/gitaly-19.1pkg:apk/chainguard/kubescapepkg:apk/chainguard/kubescape-server-fips-downloaderpkg:apk/chainguard/vitess-24pkg:apk/wolfi/hubblepkg:apk/wolfi/kumactl-2.12pkg:apk/chainguard/falcoctl-fipspkg:apk/chainguard/gitaly-backup-fips-19.2pkg:apk/chainguard/kuma-cni-2.13pkg:apk/chainguard/kuma-cni-2.14pkg:apk/chainguard/kumactl-2.13pkg:apk/chainguard/milvus-3.0pkg:apk/chainguard/nerdctl-fipspkg:apk/chainguard/opentelemetry-ebpf-instrumentation-fipspkg:apk/chainguard/rke2-runtime-fips-1.33pkg:apk/wolfi/vitess-24pkg:apk/wolfi/dockerd-28pkg:apk/wolfi/gitaly-backup-19.1pkg:apk/wolfi/hubble-ui-backendpkg:apk/chainguard/dockerd-29pkg:apk/chainguard/kubescape-operatorpkg:apk/chainguard/rke2-runtime-1.36pkg:apk/chainguard/vitess-23-binariespkg:apk/chainguard/cilium-fips-1.18pkg:apk/chainguard/ctr-2.1pkg:apk/chainguard/gitaly-backup-fips-19.0pkg:apk/wolfi/delvepkg:apk/chainguard/cilium-fips-1.18-clustermesh-apiserverpkg:apk/chainguard/containerd-shim-runc-v2-2.1pkg:apk/wolfi/containerd-shim-runc-v2-1pkg:apk/chainguard/rke2-runtime-fips-1.36pkg:apk/wolfi/cilium-1.18-clustermesh-apiserverpkg:apk/wolfi/containerd-1pkg:apk/wolfi/vitess-24-binariespkg:rpm/opensuse/alloy&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/amazon-ecs-init&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/amazon-ecs-init&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/auditbeat-fips-9.3pkg:apk/chainguard/dockerd-28pkg:apk/chainguard/elastic-agent-9.2pkg:apk/chainguard/kubescape-server-downloaderpkg:apk/chainguard/kuma-cni-2.10pkg:apk/chainguard/witnesspkg:apk/wolfi/k3s-static-1.34pkg:apk/chainguard/agentbeatpkg:apk/chainguard/ctr-2pkg:apk/chainguard/envoy-gateway-fips-1.6-egctlpkg:apk/chainguard/gitaly-19.0pkg:apk/chainguard/gitaly-backup-19.0pkg:apk/chainguard/gitaly-fips-19.2pkg:apk/chainguard/hubble-ui-backend-fipspkg:apk/chainguard/kubescape-server-fipspkg:apk/chainguard/kumactl-2.11pkg:apk/chainguard/kumactl-2.7pkg:apk/chainguard/opentelemetry-ebpf-instrumentationpkg:apk/chainguard/prometheus-2.51pkg:apk/chainguard/rke2-runtime-1.32pkg:apk/wolfi/cilium-1.18pkg:apk/wolfi/cilium-1.18-hubble-relaypkg:apk/wolfi/cilium-1.18-operator-awspkg:apk/wolfi/ctr-2pkg:apk/chainguard/auditbeat-fips-9.4pkg:apk/chainguard/containerd-1pkg:apk/chainguard/cosmo-router-fipspkg:apk/chainguard/gitaly-backup-fips-19.1pkg:apk/chainguard/gitaly-fips-19.1pkg:apk/chainguard/k3s-1.34pkg:apk/chainguard/k3s-static-1.34pkg:apk/chainguard/kubescape-operator-fipspkg:apk/chainguard/kumactl-2.12pkg:apk/chainguard/rke2-runtime-1.33pkg:apk/chainguard/rke2-runtime-1.35pkg:apk/chainguard/splunk-otel-collector-fipspkg:apk/wolfi/kubescape-operatorpkg:apk/wolfi/vitess-23pkg:apk/chainguard/containerd-2.3pkg:apk/chainguard/elastic-otel-collector-fips-9.4pkg:apk/chainguard/gitaly-backup-19.1pkg:apk/chainguard/cilium-fips-1.18-operator-azurepkg:apk/chainguard/cilium-fips-1.18-operator-genericpkg:apk/chainguard/envoy-gateway-1.6-egctlpkg:apk/chainguard/gitaly-19.2pkg:apk/chainguard/gitaly-backup-19.2pkg:apk/chainguard/kubescape-serverpkg:apk/chainguard/kuma-cni-2.9pkg:apk/chainguard/milvus-2.5pkg:apk/wolfi/kuma-cni-2.12pkg:apk/wolfi/witnesspkg:apk/chainguard/ctr-1pkg:apk/wolfi/cilium-1.18-operator-genericpkg:apk/wolfi/dockerd-29pkg:apk/wolfi/gitaly-19.0pkg:apk/wolfi/nerdctlpkg:apk/wolfi/splunk-otel-collectorpkg:apk/chainguard/cilium-1.18-hubble-relaypkg:apk/chainguard/cilium-1.18-operator-genericpkg:apk/chainguard/containerd-shim-runc-v2-2.3pkg:apk/chainguard/ctr-fipspkg:apk/chainguard/dockerd-fips-29pkg:apk/chainguard/elastic-agent-fips-9.2pkg:apk/chainguard/gitaly-fips-19.0pkg:apk/chainguard/hubblepkg:apk/chainguard/hubble-fipspkg:apk/chainguard/kuma-cni-2.11pkg:apk/chainguard/kuma-cni-2.7pkg:apk/chainguard/nerdctlpkg:apk/chainguard/vitess-23pkg:apk/wolfi/containerd-2pkg:apk/wolfi/gitaly-backup-19.0pkg:apk/wolfi/kubescapepkg:apk/wolfi/kuma-cni-2.13pkg:rpm/opensuse/ctop&distro=openSUSE%20Leap%2016.0
< 2.2.7-r3+ 175 more
- (no CPE)range: < 2.2.7-r3
- (no CPE)range: < 1.27.1-r2
- (no CPE)range: < 9.3.8-r6
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 2.1.9-r7
- (no CPE)range: < 2.2.7-r3
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 28.5.2-r18
- (no CPE)range: < 9.4.5-r2
- (no CPE)range: < 1.7.5-r28
- (no CPE)range: < 1.7.5-r21
- (no CPE)range: < 0.13.0-r19
- (no CPE)range: < 2.10.8-r20
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 19.1.6-r0
- (no CPE)range: < 0.60.3-bp160.1.1
- (no CPE)range: < 8.19.20-r2
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 2.9.19-r3
- (no CPE)range: < 23.0.5-r9
- (no CPE)range: < 0
- (no CPE)range: < 1.34.10.2.1-r2
- (no CPE)range: < 0.158.0-r2
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 2.14.3-r2
- (no CPE)range: < 9.4.5-r2
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.36.4.1-r1
- (no CPE)range: < 1.35.8.1-r2
- (no CPE)range: < 1.36.4.1-r1
- (no CPE)range: < 1.35.8.1-r2
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 1.36.4.1-r1
- (no CPE)range: < 1.35.8.1-r2
- (no CPE)range: < 1.36.4.1-r1
- (no CPE)range: < 1.35.8.1-r2
- (no CPE)range: < 1.17.1-160000.1.1
- (no CPE)range: < 1.34.10.2.1-r2
- (no CPE)range: < 1.9.0-r3
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 2.12.3-r22
- (no CPE)range: < 24.0.2-r13
- (no CPE)range: < 0.13.0-r19
- (no CPE)range: < 8.19.20-r6
- (no CPE)range: < 9.2.8-r23
- (no CPE)range: < 1.5.1-r6
- (no CPE)range: < 1.9.0-r4
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 1.5.1-r6
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 2.2.7-r3
- (no CPE)range: < 2.3.4-r2
- (no CPE)range: < 0.340.0-r2
- (no CPE)range: < 1.35.7.2.1-r2
- (no CPE)range: < 1.34.10.1-r3
- (no CPE)range: < 0.60.3-1.1
- (no CPE)range: < 0.13.5-r16
- (no CPE)range: < 2.13.10-r2
- (no CPE)range: < 9.2.7-r22
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 19.1.6-r0
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 24.0.2-r13
- (no CPE)range: < 1.19.4-r12
- (no CPE)range: < 2.12.3-r22
- (no CPE)range: < 0.13.0-r18
- (no CPE)range: < 19.2.2-r2
- (no CPE)range: < 2.13.10-r2
- (no CPE)range: < 2.14.3-r2
- (no CPE)range: < 2.13.10-r2
- (no CPE)range: < 3.0.0-r3
- (no CPE)range: < 2.3.5-r4
- (no CPE)range: < 0.11.0-r0
- (no CPE)range: < 1.33.13.2.2-r2
- (no CPE)range: < 24.0.2-r13
- (no CPE)range: < 28.5.2-r32
- (no CPE)range: < 19.1.6-r0
- (no CPE)range: < 0.13.5-r16
- (no CPE)range: < 29.7.2-r2
- (no CPE)range: < 0.2.162-r2
- (no CPE)range: < 1.36.3.2.1-r2
- (no CPE)range: < 23.0.5-r9
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 2.1.9-r7
- (no CPE)range: < 19.0.8-r0
- (no CPE)range: < 1.27.1-r2
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 2.1.9-r7
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 1.36.3.2.1-r1
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 24.0.2-r13
- (no CPE)range: < 1.17.1-1.1
- (no CPE)range: < 1.106.0-1.1
- (no CPE)range: < 1.106.0-160000.1.1
- (no CPE)range: < 9.3.8-r5
- (no CPE)range: < 28.5.2-r32
- (no CPE)range: < 9.2.8-r17
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 2.10.8-r20
- (no CPE)range: < 0.12.0-r5
- (no CPE)range: < 1.34.10.1-r3
- (no CPE)range: < 9.2.7-r22
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 1.6.7-r12
- (no CPE)range: < 19.0.8-r1
- (no CPE)range: < 19.0.8-r1
- (no CPE)range: < 19.2.2-r2
- (no CPE)range: < 0.13.5-r16
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 2.11.7-r25
- (no CPE)range: < 2.7.19-r23
- (no CPE)range: < 0.11.0-r0
- (no CPE)range: < 2.51.2-r65
- (no CPE)range: < 1.32.13.2.2-r5
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 9.4.5-r1
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 0.340.0-r2
- (no CPE)range: < 19.1.6-r1
- (no CPE)range: < 19.1.6-r1
- (no CPE)range: < 1.34.10.1-r3
- (no CPE)range: < 1.34.10.1-r3
- (no CPE)range: < 0.2.162-r2
- (no CPE)range: < 2.12.3-r22
- (no CPE)range: < 1.33.13.2.2-r2
- (no CPE)range: < 1.35.7.2.1-r2
- (no CPE)range: < 0.158.0-r2
- (no CPE)range: < 0.2.162-r2
- (no CPE)range: < 23.0.5-r9
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 9.4.5-r2
- (no CPE)range: < 19.1.6-r0
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 1.18.12-r5
- (no CPE)range: < 1.6.7-r8
- (no CPE)range: < 19.2.4-r1
- (no CPE)range: < 19.2.4-r1
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 2.9.19-r3
- (no CPE)range: < 2.5.27-r23
- (no CPE)range: < 2.12.3-r22
- (no CPE)range: < 0.12.0-r5
- (no CPE)range: < 1.7.34-r7
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 29.7.2-r2
- (no CPE)range: < 19.0.8-r1
- (no CPE)range: < 2.3.5-r6
- (no CPE)range: < 0.158.0-r2
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 1.18.12-r7
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 2.3.4-r2
- (no CPE)range: < 29.5.2-r20
- (no CPE)range: < 9.2.8-r15
- (no CPE)range: < 19.0.8-r0
- (no CPE)range: < 1.19.4-r12
- (no CPE)range: < 1.19.4-r11
- (no CPE)range: < 2.11.7-r25
- (no CPE)range: < 2.7.19-r23
- (no CPE)range: < 2.3.5-r6
- (no CPE)range: < 23.0.5-r9
- (no CPE)range: < 2.3.4-r3
- (no CPE)range: < 19.0.8-r1
- (no CPE)range: < 4.0.12-r3
- (no CPE)range: < 2.13.10-r2
- (no CPE)range: < 0.7.7-bp160.2.1
Patches
Vulnerability mechanics
References
10- github.com/cilium/ebpf/commit/533dfc82fd228bfadf42ea7180c39de7d9af47fanvdPatchWEB
- github.com/cilium/ebpf/pull/2021nvdIssue TrackingPatchWEB
- gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815nvdExploitIssue TrackingMitigationThird Party AdvisoryWEB
- github.com/advisories/GHSA-xhgw-qwwf-pg32ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-10722ghsaADVISORY
- vuldb.com/cve/CVE-2026-10722nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/submit/818291nvdThird Party AdvisoryVDB EntryWEB
- vuldb.com/vuln/368091nvdThird Party AdvisoryVDB EntryWEB
- github.com/cilium/ebpf/issues/2019nvdIssue TrackingWEB
- vuldb.com/vuln/368091/ctinvdPermissions RequiredVDB EntryWEB
News mentions
0No linked articles in our index yet.