Aller au contenu
en Se connecter
3.8 Faible

CVE-2026-45683 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard

Description

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the Java TLS ioctl probe reads user-controlled ioctl pointers with bpf_probe_read instead of bpf_probe_read_user. An instrumented local process can therefore point OBI at kernel memory and cause that memory to be copied into telemetry. This issue has been patched in version 0.9.0.

Produits et versions touchés

Produit Versions touchées Corrigé en
opentelemetry-ebpf-instrumentation 0.9 premières → < 0.9.0 0.9.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de opentelemetry-ebpf-instrumentation

Les 11 CVE de opentelemetry-ebpf-instrumentation →
CVE-2026-45686 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard 7.5 Élevée CVE-2026-45685 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard 7.5 Élevée CVE-2026-45684 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard 4.9 Moyenne CVE-2026-45681 OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard 5.9 Moyenne
Suivre cette CVE