← Database

CVE-2026-45681

MEDIUM CVSS: 5.9 Published: 2026-06-02 Modified: 2026-07-22

Description

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload size, which can be up to 8KB. If a CPU mismatch occurs, OBI can read beyond the fallback buffer and leak adjacent memory into telemetry. This issue has been patched in version 0.9.0.

Affected Platforms

Opentelemetry Ebpf Instrumentation

Weakness Type

CWE-125, CWE-130

References