CVE-2026-45681

Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions prior to 0.9.0

Description The per-CPU message-buffer fallback path uses a 256-byte backup buffer but preserves the original payload size, which can reach up to 8KB. If a CPU mismatch occurs between producer and consumer contexts, the system can read beyond the fallback buffer, leading to a memory leak of adjacent data into telemetry. This issue specifically affects the HTTP tracing path when context propagation is enabled, the tpinjector sock msg path is active, and HTTP large-buffer capture is configured with a non-zero size. Technical details involve the fallback buf in msg buffer t and the use of real size to read payload data from u buf, which causes an over-read when the smaller fallback buffer is utilized.

Recommendations Update to version 0.9.0.