GO-2026-6238
- Source
- https://pkg.go.dev/vuln/GO-2026-6238
- Import Source
- https://vuln.go.dev/ID/GO-2026-6238.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6238
- Aliases
- Downstream
- Related
- Published
- 2026-08-18T16:38:10Z
- Modified
- 2026-08-19T21:42:00Z
- Summary
- Integer overflow in BTF parsing in github.com/cilium/ebpf
- Details
-
Integer overflow in BTF parsing in github.com/cilium/ebpf
- Database specific
{ "review_status": "REVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6238" }- References
-
- https://github.com/advisories/GHSA-xhgw-qwwf-pg32
- https://github.com/cilium/ebpf/commit/533dfc82fd228bfadf42ea7180c39de7d9af47fa
- https://github.com/cilium/ebpf/pull/2021
- https://github.com/cilium/ebpf/issues/2019
- https://gist.github.com/thesmartshadow/256bff0f8042c584f993ace89074a815
- https://vuldb.com/cve/CVE-2026-10722
- https://vuldb.com/submit/818291
- https://vuldb.com/vuln/368091
- https://vuldb.com/vuln/368091/cti
Affected packages
Go / github.com/cilium/ebpf
Package
- Name
- github.com/cilium/ebpf
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/cilium/ebpf
Affected ranges
- Type
- SEMVER
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed0.22.0
Ecosystem specific
{
"imports": [
{
"path": "github.com/cilium/ebpf/btf",
"symbols": [
"Builder.Spec",
"Cache.Kernel",
"Cache.Module",
"Handle.Spec",
"LoadKernelModuleSpec",
"LoadKernelSpec",
"LoadSpec",
"LoadSpecAndExtInfosFromReader",
"LoadSpecFromReader",
"LoadSplitSpec",
"LoadSplitSpecFromReader",
"loadRawSpec"
]
}
]
}