CVE-2026-10722

A flaw was found in the cilium/ebpf Go library (versions up to 0.21.0). An integer overflow in the loadRawSpec function (btf/btf.go) when parsing BTF collection specs can cause excessive memory allocation or parsing failure. A local attacker who can supply a crafted eBPF collection spec to an application using this library could trigger a denial of service.

The cilium/ebpf library is vulnerable to an integer overflow in loadRawSpec when loading BTF collection specifications. A local attacker with low privileges who can provide a malicious collection spec to a process that uses LoadCollectionSpec or LoadCollectionSpecFromReader can cause denial of service (availability impact only). CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (5.5). Affects Red Hat products that bundle github.com/cilium/ebpf, including OpenShift, CNV, bpfman, network observability, and other container/runtime components.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.