Go/github.com/cilium/ebpf CVE-2026-10722: low 3.3, EPSS 0.18%
ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader
Action: Upgrade github.com/cilium/ebpf to 0.22.0 or later.
go get github.com/cilium/ebpf@v0.22.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.0 | - |
Fixed versions
| 0.22.0 |
Sources
- osv: GHSA-xhgw-qwwf-pg32
- https://nvd.nist.gov/vuln/detail/CVE-2026-10722
- https://github.com/cilium/ebpf/issues/2019
- https://github.com/cilium/ebpf/pull/2021
- https://github.com/cilium/ebpf/commit/533dfc82fd228bfadf42ea7180c39de7d9af47fa
- https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815
- https://github.com/cilium/ebpf
- https://vuldb.com/cve/CVE-2026-10722
- https://vuldb.com/submit/818291
- https://vuldb.com/vuln/368091
- https://vuldb.com/vuln/368091/cti
CVE-2026-10722 · published · modified · JSON