A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the
    file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the
    argument offset leads to integer overflow. The attack can only be performed from a local environment. The
    exploit has been disclosed to the public and may be used. The name of the patch is
    533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
    (CVE-2026-10722)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21574-1 advisory.

    This update for amazon-ecs-init fixes the following issue:

    Update to version 1.106.0.

    Security issues fixed:

    - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary     check can lead       to crash when malformed ELF/BTF input is parsed (bsc#1267794).

    Other updates and bugfixes:

    - Version 1.106.0:
      * Feature - Feature - Add FIS-driven DNS refresh add-sources endpoint         for network-latency and network-packet-loss faults (#5029)
      * Enhancement - Enhancement: Update SSM Agent version to 3.3.4624.0         for ECS exec (#5054)
      * Enhancement - Backfill host DNS config on isolated platform (#5047)
      * Enhancement - Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4         in /agent (#5051)
      * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials in /ecs-agent,         /agent and /ecs-init to 1.19.29 (#5050)
      * Enhancement - Bump actions/setup-go from 6 to 7 in /.github/workflows (#5049)
      * Enhancement - Update Go version to 1.25.12 (#5048)
      * Enhancement - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1         in /ecs-agent, /agent and /ecs-init (#5037)
      * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to         1.19.28 in /agent (#5038)
      * Enhancement - Bump github.com/hectane/go-acl from 0.0.0-20190604041725-da78bae5fc95         to 1.0.0 in /agent (#5022)
      * Enhancement - chore(deps): bump github.com/cilium/ebpf from v0.16.0 to v0.22.0         in /agent (#5034)
      * Enhancement - Bump golang.org/x/net from 0.48.0 to 0.55.0 in         /ecs-agent/daemonimages/csidriver (#5031)
      * Enhancement - api-2.json: Add CONFIDENTIAL_PARTITION and attestationPolicy to         api model (#5033)
      * Bugfix - Fix flaky TestHostResourceManagerTrickleQueue integration test (#5026)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22946-1 advisory.

    This update for alloy fixes the following issue:

    Update to version 1.17.1.

    Security issue fixed:

    - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary     check can lead       to crash when malformed ELF/BTF input is parsed (bsc#1267811).

    Other updates and bugfixes:
    - Version 1.17.1:
      * Back off usage reporting on persistent failure instead of retrying every minute.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21442-1 advisory.

    This update for alloy fixes the following issue:

    Update to version 1.17.1.

    Security issue fixed:

    - CVE-2026-10722: github.com/cilium/ebpf: interger overflow when performing BTF string offset boundary     check can lead       to crash when malformed ELF/BTF input is parsed (bsc#1267811).

    Other updates and bugfixes:
    - Version 1.17.1:
      * Back off usage reporting on persistent failure instead of retrying every minute.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21379-1 advisory.

    Changes in ctop embedded dependencies:

    - CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710)
    - CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#1257431)
    - CVE-2026-10722: ebpf: Crash when parsing malformed ELF/BTF input (bsc#1267805)
    - CVE-2026-33814: net: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE     (bsc#1265800)
    - CVE-2026-39821: net: Failure to reject ASCII-only Punycode-encoded labels (bsc#1266632)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2824-1 advisory.

    This update for alloy fixes the following issues

    - CVE-2026-10722: github.com/cilium/ebpf: BTF string offset boundary check can lead to crash when parsing     malformed ELF/BTF input (bsc#1267811).
    - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html:
    multiple issues when parsing HTML files (bsc#1267185).
    - CVE-2026-33532: Denial of Service via deeply nested YAML document parsing (bsc#1260981).
    - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for     validation bypass and privilege escalation (bsc#1266654).
    - CVE-2026-39827,CVE-2026-39828,CVE-2026-39829,CVE-2026-39830,CVE-2026-39831,CVE-2026-39832,CVE-2026-     39833,CVE-2026-39834,CVE-2026-39835,CVE-2026-42508,CVE-2026-46595,CVE-2026-46597,CVE-2026-46598:
    golang.org/x/crypto/ssh: multiple issues (bsc#1266196).
    - CVE-2026-41889: github.com/jackc/pgx/v5/internal/sanitize: SQL injection when placeholders in dollar-     quoted string literals are used in the SQL query (bsc#1265440).
    - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to     DoS via infinite loops, panics or resource consumption (bsc#1267333).
    - CVE-2026-45678: go.opentelemetry.io/obi: Postgres BIND parsing can lead to a panic when malformed     payloads are processed (bsc#1267481).
    - CVE-2026-45682: go.opentelemetry.io/obi: keys not deleted by `CappedConcurrentHashMap` after removals     allows repeated connection churn to grow the queue without bound and exhaust heap memory (bsc#1267485).
    - CVE-2026-45685: go.opentelemetry.io/obi: MongoDB TCP parser panics on malformed wire messages and causes     a DoS (bsc#1267488).
    - CVE-2026-45686: go.opentelemetry.io/obi: integer overflow in memcached text protocol parser can crash     the OBI process and cause denial of service (bsc#1267489).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21265-1 advisory.

    Changes in cadvisor:

    - update to 0.60.3:
      * Move OOM watching out of the lib module into the binary
      * lib/model: make ContainerStats sub-stats pointers to convey         collection presence
    - update to 0.60.1:
      * cpuload/netlink: report the real error and skip the reader on         cgroup v2
      * deploy: add lib/go.mod to the image build's dependency cache
    - update to 0.60.0:
      * Exposing additional cgroup v2 memory.stat metrics
      * lib: introduce github.com/google/cadvisor/lib  a lean,         kubelet-focused library module
    - bump x/net to 0.55 (bsc#1266645, CVE-2026-39821)

    - update to 0.57.0 (bsc#1260305, CVE-2026-33186):
      * integration: add more Docker container handler tests
      * integration: add containerd container handler tests
      * integration: add Prometheus metrics endpoint tests
      * fix: support podman `volatile-containers.json` and/or         `containers.json`
      * proposed roadmap for cAdvisor
      * remove log message when you can't read productName
      * Refactor Github Action per b/485167538
      * fix crio deadlock in getting crio sandbox containers
      * Add container_creation_time_seconds (previously:
        container_start_time_seconds); use runtime start time for         container_start_time_seconds (podman & docker)
      * deps: github.com/moby/moby/client v0.4.0, moby/api v1.54.1,         containerd/ttrpc v1.2.8
      * fix(build): update k8s-staging-test-infra image in integ         tests
      * feat(manager/container): add configurable initial splay and         max jitter factors
      * feat(manager): add constraint data in OOM events
      * fix: add v-prefixed GHCR image tags for release consistency
      * build(deps): bump the go_modules group across 2 directories         with 1 update
      * Expose cgroup v2 memory.events as Prometheus metrics
      * deploy: bump base images to Alpine 3.23

    - Update to version 0.56.2:
      * docker: fix nil pointer dereference when GraphDriver is nil
      * Update healthcheck.sh
      * Update entrypoint.sh
      * docker: migrate to github.com/moby/moby modules
      * Update containerd, docker, moby, and opencontainers dependencies
      * update README
      * Update copyright year in healthcheck.sh
      * Update copyright year in entrypoint.sh
      * Added cadvisor boilerplate header to deploy/entrypoint.sh
      * Added cadvisor boilerplate header to deploy/healthcheck.sh
      * Add EXPOSE 8080 to document default port
      * Fix healthcheck to respect custom port flag
      * Add entrypoint wrapper to preserve -logtostderr flag
      * add std in summary
      * fix formatting
      * Update container/docker/factory.go
      * Update factory.go
      * Update factory.go
      * Update factory.go
      * Fix for issue #3772
      * docs: replace references to docker registry `gcr.io` with `ghcr.io`
      * Expose s390x CPU Topology to Prometheus

    - update to 0.55.1:
      * manager: fix race condition in Stop() using sync.Once
      * manager: fix race condition in Stop() using sync.Once
    - update to 0.55.0:
      * Reduce lock contention in manager package
      * container/podman: fix `zfsFilesystem` and `zfsParent` being         swapped.
      * devicemapper: use atomic.Value for lock-free cache reads
      * Reduce lock contention in cache/memory package
      * zfs: use atomic.Value for lock-free cache reads
      * fix: docker health check status not updating
      * align docker and podman implementations
      * disable CGO for fully static binaries
      * close stale PRs and Issues
      * refactor(container): Migrate to std lib context package
      * add workflow_dispatch to stale github action
      * plugin factory: remove useless RegisterPlugin log output
      * feat(summary): add count in percentiles
      * machine: fixes for unix.Uname use
      * feat: add LoadTaskProcess api in containerd client
      * feat: add exit code in container deletion events
      * feat: add CRI-O integration tests
      * test: reorganize integration tests and add CRI-O test         coverage
      * refactor: remove duplicate tests from api package and add         missing CRI-O tests
      * fix: update golang.org/x/crypto to v0.45.0 to fix security         vulnerabilities
      * container/(docker|podman): rewrite obtaining IP-address
      * Upgrade GitHub Actions to latest versions
      * Upgrade GitHub Actions for Node 24 compatibility
      * feat: add fs io cost metrics
      * go.mod: github.com/docker/go-connections v0.6.0
      * fs: introduce pluggable filesystem architecture
      * Apply build tags liberally for supported environments (linux)
      * Replace godirwalk with os.ReadDir from standard library
      * feat: add cpu burst metrics
    - update to 0.54.1:
      * chore: update cAdvisor image registry and version in         DaemonSet
      * ci: update Ubuntu version to 24.04 in GitHub Actions         workflows
      * chore: re-enable golangci-lint checks and fix violations
      * container/docker: GetStats: prevent nil-pointer
    - update to 0.54.0:
      * Let us try to use ghcr.io for container images
      * Add a GH action to create release binaries
      * use qemu/docker to build arch specific binaries
      * add -buildvcs=false to GH action
      * fix(3643) add containerd-snapshotter support
      * Update README.md with latest Docker image version and         registry
      * Rebase to alpine 3.22, install thin-provisioning-tools from         main repo
      * feat: add metric for container health check status  (DOCKER-         Specific!)
      * Update golang and deps
    - update to version 0.54.1:
      * container/docker: GetStats: prevent nil-pointer
      * chore: re-enable golangci-lint checks and fix violations
      * fix: use Docker-embedded containerd socket in integration tests
      * refactor: remove Mesos container support
      * ci: add diagnostic logging for docker/containerd debugging
      * fix: persist containerd client error to prevent nil pointer dereference
      * ci: update Ubuntu version to 24.04 in GitHub Actions workflows
      * chore: update cAdvisor image registry and version in DaemonSet
      * fix: handle nil Health state in docker container handler
      * ci: update Go version to 1.25 in GitHub Actions workflows
      * fix: update dependencies to address security vulnerabilities
      * add health status tests
      * feat: Update docker container handler to include health status in stats
      * Rebase to alpine 3.22, install thin-provisioning-tools from main repo
      * Update README.md Docker image reference
      * fix(3643) add containerd-snapshotter support
      * add -buildvcs=false to GH action
      * use qemu/docker to build arch specific binaries
      * Add a GH action to create release binaries
      * Let us try to use ghcr.io for container images (#3699)

    - update to 0.53.0 (bsc#1257429, CVE-2024-45310,         bsc#1267788, CVE-2026-10722):
      * fix potential hang on containerd client.LoadContainer
      * Bump dependencies to latest (June 2, 2025)
      * fix: fix call Errorf with wrong err
      * Fixed possible data race
      * Use built-in error wrapping instead of pkg/errors

    - update to 0.52.1:
      * Make resctrl optional/pluggable
    - update to 0.52.0:
      * bump containerd related deps: api v1.8.0; errdefs v1.0.0;
        ttrpc v1.2.6
      * chore: Update Prometheus libraries
      * ci: golangci-lint bump, fixes, and cleanups
      * bump runc to v1.2.4
      * Add Pressure Stall Information Metrics
      * Switch to opencontainers/cgroups repository (includes update         from golang 1.22 to 1.24)
      * Bump to newer opencontainers/image-spec @ v1.1.1
    - update to 0.49.2:
      * Cp fix test
      * Revert reduce_logs_for_kubelet_use_crio

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the     file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the     argument offset leads to integer overflow. The attack can only be performed from a local environment. The     exploit has been disclosed to the public and may be used. The name of the patch is     533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.
    (CVE-2026-10722)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
446032	SCA: security update for github.com/cilium/ebpf (GHSA-xhgw-qwwf-pg32)	Tenable Cloud Security	SCA Checks	Local	medium
446032	SCA: security update for github.com/cilium/ebpf (GHSA-xhgw-qwwf-pg32)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
335499	openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21574-1)	Nessus	SuSE Local Security Checks	Local	medium
330568	SUSE SLES16 Security Update : alloy (SUSE-SU-2026:22946-1)	Nessus	SuSE Local Security Checks	Local	medium
330076	openSUSE 16 Security Update : alloy (openSUSE-SU-2026:21442-1)	Nessus	SuSE Local Security Checks	Local	medium
328919	openSUSE 16 Security Update : ctop (openSUSE-SU-2026:21379-1)	Nessus	SuSE Local Security Checks	Local	medium
326329	SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2026:2824-1)	Nessus	SuSE Local Security Checks	Local	medium
326025	openSUSE 16 Security Update : cadvisor (openSUSE-SU-2026:21265-1)	Nessus	SuSE Local Security Checks	Local	medium
318698	Linux Distros Unpatched Vulnerability : CVE-2026-10722	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-10722

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium