StackRadar

CVE-2026-10722

Low

Advisory

Published 3 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
173
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader

Carried by container images the latest versions of 173 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/cilium/ebpfgolangv0.0.0-20191113100448-d9fb101ca1fb, v0.4.0, v0.5.0, v0.6.1+22 more0.22.0156
OSV records
GHSA-xhgw-qwwf-pg32
Also known as
GO-2026-6238

Charts affected

173 by stars
ChartLatestAffected imagesRadar Score
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,429
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

3,462
buildkitsomaz94Verified publisher0.1.41 of 1See more

buildkit somaz94 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.06c2fa84a6b61
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

722
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

3,232
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
github.com/cilium/ebpf@v0.10.0
0.22.0

Open the chart page →

2,220
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/cilium/ebpf@v0.6.1
0.22.0

Open the chart page →

6,950
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

20,223
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,938
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
github.com/cilium/ebpf@v0.17.3
0.22.0
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

4,277
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

3,025
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/cilium/ebpf@v0.17.1
0.22.0
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/cilium/ebpf@v0.17.1
0.22.0

Open the chart page →

4,046
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

3,911
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
github.com/cilium/ebpf@v0.13.2
0.22.0

Open the chart page →

2,824
azure-janitorwebdevopsVerified publisher1.0.131 of 1See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-janitor:24.9.02446baee7b69
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

801
azure-keyvault-exporterwebdevopsVerified publisher1.0.121 of 1See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

801
azure-resourcegraph-exporterwebdevopsVerified publisher1.1.51 of 1See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

785
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

1,122
kube-pool-managerwebdevopsVerified publisher1.0.161 of 1See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/kube-pool-manager:24.9.04fad7e14ad67
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

499
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

1,456
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/cilium/ebpf@v0.16.0
0.22.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

9,381

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0
6
rancher/rancher:v2.15.15f6c4dc52a05
github.com/cilium/ebpf@v0.16.0
0.22.0
4
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/cilium/ebpf@v0.11.0
0.22.0
4
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
github.com/cilium/ebpf@v0.11.0
0.22.0
4
derailed/popeye:v0.22.18e68e22c7663
github.com/cilium/ebpf@v0.15.0
0.22.0
3
prom/prometheus:v3.0.1565ee8650122
github.com/cilium/ebpf@v0.11.0
0.22.0
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/cilium/ebpf@v0.11.0
0.22.0
3
grafana/alloy:v1.8.17790f6f7fbd8
github.com/cilium/ebpf@v0.17.3
0.22.0
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/cilium/ebpf@v0.19.0
0.22.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cilium/ebpf@v0.7.0
0.22.0
2
library/docker:dind5efed980cba3
github.com/cilium/ebpf@v0.17.3
0.22.0
2
moby/buildkit:v0.32.2-rootless504731e577c2
github.com/cilium/ebpf@v0.17.3
0.22.0
2
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/cilium/ebpf@v0.21.0
0.22.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/cilium/ebpf@v0.9.1
0.22.0
2
prom/prometheus:v2.52.05c435642ca4d
github.com/cilium/ebpf@v0.11.0
0.22.0
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cilium/ebpf@v0.7.0
0.22.0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/cilium/ebpf@v0.17.3
0.22.0
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/cilium/ebpf@v0.11.0
0.22.0
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/cilium/ebpf@v0.9.1
0.22.0
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
github.com/cilium/ebpf@v0.21.1-0.20260427123516-6bf8ddfd0f0f
0.22.0
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/cilium/ebpf@v0.16.0
0.22.0
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus-operator/prometheus-operator:v0.77.1dde69a8b6f4b
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/cilium/ebpf@v0.11.0
0.22.0
2
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
github.com/cilium/ebpf@v0.11.0
0.22.0
2
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cilium/ebpf@v0.7.0
0.22.0
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/cilium/ebpf@v0.7.0
0.22.0
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cilium/ebpf@v0.0.0-20191113100448-d9fb101ca1fb
0.22.0
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
github.com/cilium/ebpf@v0.11.0
0.22.0
1
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/cilium/ebpf@v0.11.0
0.22.0
1
concourse/concourse:8.3.040a143ce5873
github.com/cilium/ebpf@v0.16.0
0.22.0
1
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/cilium/ebpf@v0.17.3
0.22.0
1
datadog/agent:6aad9994de6a7
github.com/cilium/ebpf@v0.13.3-0.20240314165416-06282fb6ba65
0.22.0
1
datasaker/dsk-container-agent:latest08b52999f67b
github.com/cilium/ebpf@v0.7.0
0.22.0
1
ddosify/alaz:v0.12.0ea602056d9ce
github.com/cilium/ebpf@v0.10.1-0.20230626090016-654491c8a500
0.22.0
1
erigontech/erigon:latest2252efdf9abe
github.com/cilium/ebpf@v0.16.0
0.22.0
1
erigontech/erigon:v2.61.288706754b627
github.com/cilium/ebpf@v0.11.0
0.22.0
1
falcosecurity/falcoctl:0.13.00eeb79adc580
github.com/cilium/ebpf@v0.21.0
0.22.0
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/cilium/ebpf@v0.21.0
0.22.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/cilium/ebpf@v0.16.0
0.22.0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/cilium/ebpf@v0.12.3
0.22.0
1
gocrane/craned:v0.5.1a1400909118c
github.com/cilium/ebpf@v0.6.2
0.22.0
1
grafana/agent:v0.44.23364714a2f64
github.com/cilium/ebpf@v0.12.3
0.22.0
1
grafana/agent:v0.40.3f6cbec9409be
github.com/cilium/ebpf@v0.12.3
0.22.0
1
grafana/alloy:v1.5.101a63f4e032c
github.com/cilium/ebpf@v0.16.0
0.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.