10 matches found
tetragon
Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...
tetragon-dirtyfrag
tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...
tetragon v1.7.1
Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: azure-service-operator, flux-notification-controller, descheduler, keda, opentelemetry-operator, cilium, cluster-api-ipam-provider-in-cluster, emissary, cluster-api-helm-controller, flux-helm-controller, kube-metrics-adapter, kubeflow-pipelines, kwok,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: flux, gitness, aactl, thanos-operator, glab, nri-apache, rancher-system-upgrade-controller, terraform-provider-google, kapp, smokescreen, step, istio, tkn, cert-exporter, dagdotdev, traefik, kubo, oauth2-proxy, mongo-tools, azurefile-csi, falcosidekick, kuma, tetrago...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: flux, gitness, aactl, thanos-operator, glab, nri-apache, rancher-system-upgrade-controller, terraform-provider-google, kapp, smokescreen, step, istio, tkn, cert-exporter, dagdotdev, traefik, kubo, oauth2-proxy, mongo-tools, azurefile-csi, falcosidekick, kuma, tetrago...
PT-2026-67993
В известном решении по безопасности Tetragon закрыли «Unauthenticated Tetragon gRPC admin API accessible from hostNetwork pods» - CVE-2026-65960 CVSS 8.8. Суть простая: агент поднимает свой административный gRPC API по TCP на localhost:54321 и без какой-либо аутентификации. Таким образом любой...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: azure-service-operator, flux-notification-controller, descheduler, keda, opentelemetry-operator, cilium, cluster-api-ipam-provider-in-cluster, emissary, cluster-api-helm-controller, flux-helm-controller, kube-metrics-adapter, kubeflow-pipelines, kwok,...
CVE-2026-33186 vulnerabilities
Vulnerabilities for packages: terraform-provider-kubernetes-fips, crossplane-provider-keycloak, flux-image-automation-controller-fips, gomplate, ceph-csi-operator-fips, knative-serving, prometheus-podman-exporter, knative-net-istio, sops, loki-fips, opentelemetry-collector-contrib-fips, packer,...
GHSA-P77J-4MVH-X3M3 vulnerabilities
Vulnerabilities for packages: terraform-provider-kubernetes-fips, crossplane-provider-keycloak, flux-image-automation-controller-fips, gomplate, ceph-csi-operator-fips, knative-serving, prometheus-podman-exporter, knative-net-istio, sops, loki-fips, opentelemetry-collector-contrib-fips, packer,...