<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T12:48:42.871283+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/cleanstart-2026-ci21288</id>
    <title>CLEANSTART-2026-CI21288 — vulnerability has been found in cilium ebpf up to 0</title>
    <updated>2026-10-03T12:48:43.019501+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> CleanStart: grafana-alloy</p>
<p>Security vulnerability affects the grafana-alloy package. A vulnerability has been found in cilium ebpf up to 0.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/cleanstart-2026-ci21288"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-324332</id>
    <title>EUVD-2026-324332</title>
    <updated>2026-10-03T12:48:43.019562+00:00</updated>
    <content>EUVD-2026-324332</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-324332"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2026-10722</id>
    <title>fkie_cve-2026-10722</title>
    <updated>2026-10-03T12:48:43.019579+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2026-10722"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-xhgw-qwwf-pg32</id>
    <title>GHSA-xhgw-qwwf-pg32 — ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader</title>
    <updated>2026-10-03T12:48:43.019610+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Go: github.com/cilium/ebpf</p>
<p>A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-xhgw-qwwf-pg32"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/msrc_cve-2026-10722</id>
    <title>msrc_CVE-2026-10722 — cilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow</title>
    <updated>2026-10-03T12:48:43.019634+00:00</updated>
    <content>msrc_CVE-2026-10722</content>
    <link href="https://cve.radiocsirt.org/vuln/msrc_cve-2026-10722"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/opensuse-su-2026:11153-1</id>
    <title>openSUSE-SU-2026:11153-1 — cadvisor-0.60.3-1.1 on GA media</title>
    <updated>2026-10-03T12:48:43.019651+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>cadvisor-0.60.3-1.1 on GA media</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/opensuse-su-2026:11153-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/suse-su-2026:22946-1</id>
    <title>SUSE-SU-2026:22946-1 — Security update for alloy</title>
    <updated>2026-10-03T12:48:43.019667+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Security update for alloy</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/suse-su-2026:22946-1"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10722</id>
    <title>UBUNTU-CVE-2026-10722</title>
    <updated>2026-10-03T12:48:43.019681+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:22.04:LTS: golang-github-cilium-ebpf, Ubuntu:24.04:LTS: golang-github-cilium-ebpf, Ubuntu:25.10: golang-github-cilium-ebpf, Ubuntu:26.04:LTS: golang-github-cilium-ebpf</p>
<p>A vulnerability has been found in cilium ebpf up to 0.21.0. This affects the function loadRawSpec of the file btf/btf.go of the component LoadCollectionSpec/LoadCollectionSpecFromReader. Such manipulation of the argument offset leads to integer overflow. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The name of the patch is 533dfc82fd228bfadf42ea7180c39de7d9af47fa. A patch should be applied to remediate this issue.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10722"/>
  </entry>
</feed>
