ebpf instrumentation vulnerabilities and fixes

Recent CVEs affecting ebpf instrumentation, with upgrade or downgrade steps. 10 tracked.

Also searched as: ebpfinstrumentation.

ebpf instrumentation has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-06-02. Highest priority: CVE-2026-45685 (score 46/100).

• CVE-2026-45685 HIGH 7.5 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45678 HIGH 7.5 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45686 HIGH 7.5 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45680 MEDIUM 5.9 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45679 MEDIUM 6.5 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45681 MEDIUM 5.9 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45676 MEDIUM 5.5 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45682 MEDIUM 5.1 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45684 MEDIUM 4.9 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard
• CVE-2026-45683 LOW 3.8 UPGRADE OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard

FAQ

How do I fix ebpf instrumentation vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ebpf instrumentation being exploited right now?

None of the tracked ebpf instrumentation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ebpf instrumentation CVE should I patch first?

CVE-2026-45685 currently ranks highest (46/100): OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard.

RSS feed for ebpf instrumentation · ← Back to latest CVEs