Security Advisory

CVE-2026-10722

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-03 10:45:10
Last updated 2026-06-03 14:07:17
Assigner VulDB
CVSS score not scored
State PUBLISHED

Description

A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.