CVE catalog
CVE-2026-10722
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipula
- Severity
- Medium · CVSS 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.18% · Oct 25, 2026
A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | golang-github-cilium-ebpf | sid | 0.22.0+ds1-1 | fixed |
| Debian | golang-github-cilium-ebpf | forky | 0.22.0+ds1-1 | fixed |
| Debian | golang-github-cilium-ebpf | trixie | 0.11.0-2 | vulnerable |
| Debian | golang-github-cilium-ebpf | bookworm | 0.9.1-1 | vulnerable |
| Cpe | golang-github-cilium-ebpf | Not reported | Not reported | vulnerable |
| Cpe | ebpf | Not reported | Not reported | unknown |
| Go | github.com/cilium/ebpf | Not reported | 0.22.0 | fixed |
| Suse | govulncheck-vulndb | linux enterprise server 16.0 | 0.0.20260827T195228-160000.1.1 | fixed |
| Suse | govulncheck-vulndb | linux enterprise server for sap applications 16.0 | 0.0.20260827T195228-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server 16.0 | 1.18.0-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server for sap applications 16.0 | 1.18.0-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server 16.0 | 1.18.0-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server for sap applications 16.0 | 1.18.0-160000.1.1 | fixed |
| Opensuse | alloy | leap 16.0 | 1.18.0-160000.1.1 | fixed |
| Suse | alloy | linux enterprise module for basesystem 15 sp7 | 1.18.0-150700.15.26.1 | fixed |
| Opensuse | govulncheck-vulndb | leap 16.0 | 0.0.20260827T195228-160000.1.1 | fixed |
| Suse | amazon-ecs-init | linux enterprise server 16.0 | 1.106.0-160000.1.1 | fixed |
| Suse | amazon-ecs-init | linux enterprise server for sap applications 16.0 | 1.106.0-160000.1.1 | fixed |
| Opensuse | amazon-ecs-init | leap 16.0 | 1.106.0-160000.1.1 | fixed |
| Opensuse | amazon-ecs-init | tumbleweed | 1.106.0-1.1 | fixed |
| Suse | alloy | linux enterprise server 16.0 | 1.17.1-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server for sap applications 16.0 | 1.17.1-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server 16.0 | 1.17.1-160000.1.1 | fixed |
| Suse | alloy | linux enterprise server for sap applications 16.0 | 1.17.1-160000.1.1 | fixed |
| Opensuse | alloy | leap 16.0 | 1.17.1-160000.1.1 | fixed |
| Suse | alloy | linux enterprise module for basesystem 15 sp7 | 1.17.1-150700.15.23.1 | fixed |
| Opensuse | alloy | tumbleweed | 1.17.1-1.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | golang-github-cilium-ebpf | source | sid | 0.22.0+ds1-1 | not yet assigned | Not reported | [1139176] |
| Debian | golang-github-cilium-ebpf | source | forky | 0.22.0+ds1-1 | not yet assigned | Not reported | [1139176] |
| Debian | golang-github-cilium-ebpf | source | trixie | (unfixed) | not yet assigned | Not reported | [1139176] |
| Debian | golang-github-cilium-ebpf | source | bookworm | (unfixed) | not yet assigned | Not reported | [1139176] |
| Go | github.com/cilium/ebpf | go | Not reported | 0.22.0 | Not reported | GHSA-XHGW-QWWF-PG32 | Not reported |
| Suse | govulncheck-vulndb | rpm | linux enterprise server 16.0 | 0.0.20260827T195228-160000.1.1 | Not reported | SUSE-SU-2026:23625-1 | Not reported |
| Suse | govulncheck-vulndb | rpm | linux enterprise server for sap applications 16.0 | 0.0.20260827T195228-160000.1.1 | Not reported | SUSE-SU-2026:23625-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server 16.0 | 1.18.0-160000.1.1 | Not reported | SUSE-SU-2026:23865-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server for sap applications 16.0 | 1.18.0-160000.1.1 | Not reported | SUSE-SU-2026:23865-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server 16.0 | 1.18.0-160000.1.1 | Not reported | SUSE-SU-2026:23853-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server for sap applications 16.0 | 1.18.0-160000.1.1 | Not reported | SUSE-SU-2026:23853-1 | Not reported |
| Opensuse | alloy | rpm | leap 16.0 | 1.18.0-160000.1.1 | Not reported | OPENSUSE-SU-2026:21899-1 | Not reported |
| Suse | alloy | rpm | linux enterprise module for basesystem 15 sp7 | 1.18.0-150700.15.26.1 | Not reported | SUSE-SU-2026:4210-1 | Not reported |
| Opensuse | govulncheck-vulndb | rpm | leap 16.0 | 0.0.20260827T195228-160000.1.1 | Not reported | OPENSUSE-SU-2026:21761-1 | Not reported |
| Suse | amazon-ecs-init | rpm | linux enterprise server 16.0 | 1.106.0-160000.1.1 | Not reported | SUSE-SU-2026:23234-1 | Not reported |
| Suse | amazon-ecs-init | rpm | linux enterprise server for sap applications 16.0 | 1.106.0-160000.1.1 | Not reported | SUSE-SU-2026:23234-1 | Not reported |
| Opensuse | amazon-ecs-init | rpm | leap 16.0 | 1.106.0-160000.1.1 | Not reported | OPENSUSE-SU-2026:21574-1 | Not reported |
| Opensuse | amazon-ecs-init | rpm | tumbleweed | 1.106.0-1.1 | Not reported | OPENSUSE-SU-2026:11443-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server 16.0 | 1.17.1-160000.1.1 | Not reported | SUSE-SU-2026:22954-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server for sap applications 16.0 | 1.17.1-160000.1.1 | Not reported | SUSE-SU-2026:22954-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server 16.0 | 1.17.1-160000.1.1 | Not reported | SUSE-SU-2026:22946-1 | Not reported |
| Suse | alloy | rpm | linux enterprise server for sap applications 16.0 | 1.17.1-160000.1.1 | Not reported | SUSE-SU-2026:22946-1 | Not reported |
| Opensuse | alloy | rpm | leap 16.0 | 1.17.1-160000.1.1 | Not reported | OPENSUSE-SU-2026:21442-1 | Not reported |
| Suse | alloy | rpm | linux enterprise module for basesystem 15 sp7 | 1.17.1-150700.15.23.1 | Not reported | SUSE-SU-2026:2824-1 | Not reported |
| Opensuse | alloy | rpm | tumbleweed | 1.17.1-1.1 | Not reported | OPENSUSE-SU-2026:11165-1 | Not reported |
Notes
[trixie] golang-github-cilium-ebpf: Minor issue [bookworm] golang-github-cilium-ebpf: Minor issue
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [golang-github-cilium-ebpf-dev]Affected
Source package: [golang-github-cilium-ebpf]
Details (2)
0.9.1-1· all · bookwormAffected
nvd · golang-github-cilium-ebpf · debian · bookworm; nvd · golang-github-cilium-ebpf · debian · 12
0.9.1-1· all · bookwormAffected
nvd · golang-github-cilium-ebpf · debian · bookworm; nvd · golang-github-cilium-ebpf · debian · 12
[Debian 13 (Trixie)]
- [golang-github-cilium-ebpf-dev]Affected
Source package: [golang-github-cilium-ebpf]
Details (2)
0.11.0-2· all · trixieAffected
nvd · golang-github-cilium-ebpf · debian · 13
0.11.0-2· all · trixieAffected
nvd · golang-github-cilium-ebpf · debian · 13
[openSUSE Tumbleweed]
- [alloy]Fixed
Source package: [alloy]
Details (1)
1.18.0-1.1· x86_64 · tumbleweedFixed · Fixed:
1.17.1-1.1nvd · alloy · opensuse · tumbleweed
- [amazon-ecs-init]Fixed
Source package: [amazon-ecs-init]
Details (1)
1.106.1-1.1· x86_64 · tumbleweedFixed · Fixed:
1.106.0-1.1nvd · amazon-ecs-init · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11153-1.json]
- [https://github.com/advisories/GHSA-xhgw-qwwf-pg32]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-10722]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-10722]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22946-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:22954-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23234-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23625-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23853-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:23865-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:2824-1]
- [https://osv.dev/vulnerability/SUSE-SU-2026:4210-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11165-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:11443-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21442-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21574-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21761-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2026:21899-1]
- [https://security-tracker.debian.org/tracker/CVE-2026-10722]
- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10722.json]
[Debian Security Tracker] · [FIRST EPSS] · [GitHub Advisory Database] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]