Denial of Service Vulnerability in Inspektor Gadget for Kubernetes by Red Hat

CVE-2026-31890

What is CVE-2026-31890?

Inspektor Gadget, a toolset designed for data collection and system inspection in Kubernetes and Linux environments using eBPF, contains a vulnerability that can result in a Denial of Service. When the ring-buffer of a gadget becomes full—either through legitimate use or a malicious attack—the gadget fails to alert users and silently drops events. This issue is due to the hard-coded buffer size of 256KB, which, when exceeded, leads to the inability to transfer data correctly from eBPF programs to userspace. Importantly, the mechanism for reporting lost event counts is also compromised, as it reports a fixed value of zero. Consequently, this vulnerability allows a malicious actor to disrupt regular event processing, impacting the performance and reliability of Kubernetes clusters. The issue has been addressed in version 0.50.1.

References