8 matches found
tetragon
Cilium’s new Tetragon component enables powerful real-time, eBPF-based Security Observability and Runtime Enforcement. Tetragon detects and is able to react to security-significant events, such as Process execution events System call activity I/O activity including network & file access When used...
tetragon-dirtyfrag
tetragon-dirtyfrag Blocking the DirtyFrag Linux privilege-escalation chain CVE-2026-43284 / CVE-2026-43500 at runtime with a Cilium Tetragon TracingPolicy. The policy SIGKILLs the public proof-of-concept at its socket-setup step, before it reaches the page-cache write that would give it root. Wha...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: gatekeeper, cloud-provider-azure, descheduler, opentelemetry-operator, cert-manager-istio-csr, flux-kustomize-controller, tkn, kyverno-notation-aws, kube-metrics-adapter, kubernetes-csi-external-attacher, kwok, kapp-controller, gitlab-kas, kubescape, hubble-ui,...
GO-2026-6090 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, gogatekeeper, cloud-provider-azure, descheduler, tfsec, crossplane-provider-aws-s3, direnv, buildah, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, falcosidekick, xeol, nri-haproxy,...
CVE-2026-56862 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, gogatekeeper, cloud-provider-azure, descheduler, tfsec, crossplane-provider-aws-s3, direnv, buildah, terragrunt, kube-metrics-adapter, pguser, volume-modifier-for-k8s, falcosidekick, xeol, nri-haproxy,...
GHSA-GCJH-H69Q-9W9G vulnerabilities
Vulnerabilities for packages: gatekeeper, cloud-provider-azure, descheduler, opentelemetry-operator, cert-manager-istio-csr, flux-kustomize-controller, tkn, kyverno-notation-aws, kube-metrics-adapter, kubernetes-csi-external-attacher, kwok, kapp-controller, gitlab-kas, kubescape, hubble-ui,...
CVE-2026-33186 vulnerabilities
Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, terraform-provider-aws-fips, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, temporal-server, fluent-operator, velero-plugin-for-gcp, cluster-api-azure-controller, external-secrets-fips,...
GHSA-P77J-4MVH-X3M3 vulnerabilities
Vulnerabilities for packages: helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, terraform-provider-aws-fips, dataplaneapi-fips, secrets-store-csi-driver-provider-gcp, temporal-server, fluent-operator, velero-plugin-for-gcp, cluster-api-azure-controller, external-secrets-fips,...