---
id: CVE-2026-10722
title: >-
  github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow
  (CVE-2026-10722)
summary: >-
  A flaw was found in the cilium/ebpf Go library (versions up to 0.21.0). An
  integer overflow in the loadRawSpec function (btf/btf.go) when parsing BTF
  collection specs can cause excessive memory allocation or parsing failure. A
  local attack…
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
cvssSource: vendor
cwe: CWE-190
vendor: Red Hat
product: Red Hat OpenShift Container Platform 4
affected:
  - confidential_compute_attestation
  - multiarch_tuning_operator
  - multicluster_global_hub
  - network_observability_operator
  - openshift_service_mesh 2
  - advanced_cluster_management_for_kubernetes 2
  - ceph_storage 9
  - enterprise_linux 10
  - enterprise_linux 8
  - enterprise_linux 9
  - openshift_container_platform 4
  - openshift_virtualization 4
patched:
  - github.com/cilium/ebpf 0.22.0
published: '2026-06-03'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T17:12:31+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10722.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10722.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-10722'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2484348'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-10722'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-10722'
  - url: 'https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815'
  - url: 'https://github.com/cilium/ebpf/'
  - url: >-
      https://github.com/cilium/ebpf/commit/533dfc82fd228bfadf42ea7180c39de7d9af47fa
  - url: 'https://github.com/cilium/ebpf/issues/2019'
  - url: 'https://github.com/cilium/ebpf/pull/2021'
  - url: 'https://vuldb.com/cve/CVE-2026-10722'
  - url: 'https://vuldb.com/submit/818291'
  - url: 'https://vuldb.com/vuln/368091'
  - url: 'https://vuldb.com/vuln/368091/cti'
  - url: 'https://github.com/cilium/ebpf'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - go
  - score-dispute
epss: 0.00179
epssPercentile: 0.0739
aliases:
  - GHSA-xhgw-qwwf-pg32
ecosystem: go
scores:
  vendor: 5.5
  osv: 3.3
ingestedAt: '2026-08-17T19:20:56.198Z'
---

## Overview

A flaw was found in the cilium/ebpf Go library (versions up to 0.21.0). An integer overflow in the loadRawSpec function (btf/btf.go) when parsing BTF collection specs can cause excessive memory allocation or parsing failure. A local attacker who can supply a crafted eBPF collection spec to an application using this library could trigger a denial of service.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Confidential Compute Attestation, Multiarch Tuning Operator, Multicluster Global Hub, Network Observability Operator, OpenShift Service Mesh 2, Red Hat Advanced Cluster Management for Kubernetes 2, … · no fix planned: Confidential Compute Attestation, Multiarch Tuning Operator, Multicluster Global Hub, Network Observability Operator, … · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10722.json)

**github.com/cilium/ebpf: Cilium ebpf: Denial of Service via integer overflow** — rated Moderate by Red Hat. Released 2026-06-03, updated 2026-10-23.

Affected:

- Confidential Compute Attestation
- Multiarch Tuning Operator
- Multicluster Global Hub
- Network Observability Operator
- OpenShift Service Mesh 2
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Virtualization 4

No fix planned:

- Confidential Compute Attestation
- Multiarch Tuning Operator
- Multicluster Global Hub
- Network Observability Operator
- OpenShift Service Mesh 2
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat Ceph Storage 9
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4
- Red Hat OpenShift Virtualization 4

## Remediation

Fix deferred

## Package advisory (CVE-2026-10722)

Affected packages:

- `github.com/cilium/ebpf < 0.22.0`

Patched in:

- `github.com/cilium/ebpf 0.22.0`

Source: https://osv.dev/vulnerability/GHSA-xhgw-qwwf-pg32