7.5
High
CVE-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,…
Description
Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy. Mitigation can be done by setting max_result_limit in the search config, e.g. to 262144 (2^18). Alternatively, automatically restart the service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tempo 2.10 | 2.10.0 → 2.10.1 | No fix stated |
| Tempo 2.9 | 2.9.0 → 2.9.1 | No fix stated |
| Tempo 1.3 | 1.3.0 → 2.8.3 | No fix stated |
| Multicluster Global Hub 1.3.4 1779212259 | earliest → < 1779212259 | 1779212259 |
| Multicluster Global Hub 1.4.5 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.4 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.2 1780167118 | earliest → < 1780167118 | 1780167118 |
| Multicluster Global Hub 1.7.1 1779925273 | earliest → < 1779925273 | 1779925273 |
| Red Hat Ceph Storage 5 | Versions not published |
Show the 22 other branches Hide the 22 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Ceph Storage 6 | Versions not published | |
| Red Hat Ceph Storage 9 | Versions not published | |
| Red Hat OpenShift distributed tracing 3 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Multicluster Global Hub | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Enterprise Traces (GET) 1.0 | 1.0.0 → 2.8.7 | No fix stated |
| Red Hat multicluster global hub 1.4.3 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.6 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.7.0 1779925273 | earliest → < 1779925273 | 1779925273 |
| Multicluster Global Hub 1.6.4 1780167118 | earliest → < 1780167118 | 1780167118 |
| Multicluster Global Hub 1.7.2 1779925273 | earliest → < 1779925273 | 1779925273 |
| Red Hat multicluster global hub 1.5.0 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.4.4 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.6.0 1780167118 | earliest → < 1780167118 | 1780167118 |
| Multicluster Global Hub 1.5.7 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.5 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.2 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.1 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.5.3 1778867753 | earliest → < 1778867753 | 1778867753 |
References
- grafana.com grafana.com
Timeline
- Published
- Last modified