OpenTelemetry eBPF Profiler: unprivileged process can stall the agent by mapping a FIFO

Impact

Between 0.0.202527 and 0.0.202622, the profiler opens mapping files backed by non-regular types such as a FIFO and blocks indefinitely, halting further ELF analysis. Any unprivileged process on the node can arrange this, so a single workload silently takes down continuous profiling for the whole host. On a GPU fleet this is an observability loss, not a data loss: the agent typically runs privileged as a DaemonSet across every node, and a tenant that can start a process can blind the operator's profiling for that node without touching anyone else's GPUs. There is no claim of code execution or data exposure.

Who can reach it

Local, unauthenticated relative to the agent: any unprivileged process on a node where the profiler runs, including a process inside a tenant pod.

What to do

Upgrade the profiler to v0.0.202622. The advisory states no workarounds are available. For a DaemonSet deployment this is an image bump and a rolling restart of the agent pods - no node drain and no GPU workload interruption.

References

Related entries

• redhat-leapp Ansible collection: manipulated Leapp report makes the controller copy its own files to a managed nodeCVE-2026-68562 · ansible-collection-redhat-leapp (Leapp report-driven remediation tasks)Medium
• AMD TEE / ASP bootloader syscall input validation: Insufficient validation of syscall inputs in the AMD trustedCVE-2021-46759 · AMD TEE / ASP bootloader syscall input validationMedium
• HashiCorp Consul: Missing Content-Type header lets user input be reinterpretedCVE-2024-10086 · HashiCorp ConsulMedium
• Jenkins: agent-computed workspace browser URLs give a compromised agent stored XSS on the controllerCVE-2026-117621 · Jenkins core (workspace browser link URL computed on the agent)Medium
• Jenkins: agents can send HttpResponse-implementing exceptions to the controller, yielding XSSCVE-2026-117622 · Jenkins core (agent-to-controller exceptions implementing Stapler HttpResponse)Medium
• SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsCVE-2017-5703 · SPI flash configuration (flash descriptor / protected range registers) across multiple Intel platformsMedium