Skip to contentOpen-telemetry Opentelemetry-ebpf-instrumentation vulnerabilities
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBICVE-2026-45686Fix available7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messagesCVE-2026-45685Fix available7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffersCVE-2026-45684Fix available4.9 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removalsCVE-2026-45682Fix available5.1 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosureCVE-2026-45683Fix available3.8 Low
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB sizeCVE-2026-45681Fix available5.9 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPUCVE-2026-45680Fix available5.9 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloadsCVE-2026-45678Fix available7.5 High
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messagesCVE-2026-45679Fix available6.5 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agentCVE-2026-45676Fix available5.5 Medium
- opentelemetry ebpf instrumentation, open-telemetry opentelemetry-ebpf-instrumentation +1 moreOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIRCVE-2026-41433Fix available8.4 High