CVE-2026-44778 | Inspektor Gadget up to 0.53.0 USDT note parser pkg/uprobetracer/usdt.go getUsdtInfo DescSize/NameSize input validation

A vulnerability was found in Inspektor Gadget up to 0.53.0. It has been classified as critical. Affected is the function getUsdtInfo of the file pkg/uprobetracer/usdt.go of the component USDT note parser. The manipulation of the argument DescSize/NameSize leads to improper input validation.

This vulnerability is documented as CVE-2026-44778. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More