open-telemetry opentelemetry-ebpf-instrumentation

• CVE-2026-45686 High 7.5 OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI 0.4%
• CVE-2026-45685 High 7.5 OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages 0.5%
• CVE-2026-45684 Medium 4.9 OpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers 0.2%
• CVE-2026-45683 Low 3.8 OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure 0.2%
• CVE-2026-45681 Medium 5.9 OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size 0.3%
• CVE-2026-45680 Medium 5.9 OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU 0.3%
• CVE-2026-45679 Medium 6.5 OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages 0.2%
• CVE-2026-45678 High 7.5 OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads 0.3%
• CVE-2026-45676 Medium 5.5 OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent 0.2%
• CVE-2026-45682 Medium 5.1 OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals 0.2%
• CVE-2026-41433 High 8.4 OpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR 0.2%