Issues

• Further improvements to override.sopath

  cilium/tetragon#5883 · Filter by author FedeDP opened on Oct 21, 2026
  1

• Support multiple selectors in override.sopath

  cilium/tetragon#5882 · Filter by author FedeDP opened on Oct 21, 2026

• Refactor, simplify and unify the policytest

  cilium/tetragon#5860 · Filter by author sayboras opened on Oct 19, 2026

• fentry and LSM policies fail to load when kernel.kptr_restrict=2: "symbol __preempt_count: restricted by kernel.kptr_restrict"

  area/tracing
  Bug

  cilium/tetragon#5858 · Filter by author sayboras opened on Oct 19, 2026
  2

• LSM attribute resolution example from the docs fails to load: "owner" has type "*btf.TypeTag"

  Bug

  cilium/tetragon#5855 · Filter by author sayboras opened on Oct 18, 2026

• Tarball Tests / Packages e2e tests are flaky

  cilium/tetragon#5846 · Filter by author FedeDP opened on Oct 16, 2026
  2

• Support override.sopath in containers

  kind/enhancementrelease-blocker
  Task

  cilium/tetragon#5825 · Filter by author FedeDP opened on Oct 14, 2026
  2

  

• process cache: exit event with incomplete ancestors never drops its refcount (--enable-ancestors)

  cilium/tetragon#5809 · Filter by author achimcc opened on Oct 12, 2026
  1

• cgidmap: pod association never happens even with --enable-cri; tetragon_cri_cgidmap_resolutions_total stays 0 (v1.7.1, containerd 2.3.6)

  cilium/tetragon#5785 · Filter by author rfu10 opened on Oct 9, 2026

• mbset: RemoveID returns early and leaks the followChildren ID (duplicate value, small programs)

  area/tracinggood first issuehelp wanted
  Bug

  cilium/tetragon#5744 · Filter by author sayboras opened on Oct 1, 2026
  2

• after applying a tracingpolicy, tetragon error wit log "invalid memory address or nil pointer dereference"

  area/tracingmore-info-needed
  Bug

  cilium/tetragon#5741 · Filter by author dadahua555 opened on Sep 30, 2026
  6

• docs: Pid NotIn host_ns excludes hostPID pods; suggest Mnt for "any container" selectors

  cilium/tetragon#5733 · Filter by author houssamhammoudi opened on Sep 28, 2026
  1

• process_exec empty argument "" vs <space>

  cilium/tetragon#5710 · Filter by author sayboras opened on Sep 23, 2026

• Exclude pods by label + namespace at policy level

  Enhancement

  cilium/tetragon#5709 · Filter by author matcra587 opened on Sep 23, 2026

• CRI-O nested cgroup + cgtracker causes policy-filter miss for kprobe events with TracingPolicyNamespaced / podSelector

  Bug

  cilium/tetragon#5693 · Filter by author pasztorl opened on Sep 21, 2026
  6

  

• feature: allow matchUserCaller to match on the immediate caller on arm64

  Enhancement

  cilium/tetragon#5662 · Filter by author 3u13r opened on Sep 17, 2026

• bug : logger.Fatal exits 255 and skips deferred cleanup (pidfile, metrics, sensor unload)

  Bug

  cilium/tetragon#5659 · Filter by author AdeshDeshmukh opened on Sep 17, 2026
  1

• bug : daemon panic on empty/all-NUL matchArgs values in NUL-strip selectors

  Bug

  cilium/tetragon#5650 · Filter by author AdeshDeshmukh opened on Sep 16, 2026
  2

• bug : observer panics (OOM) on truncated MSG_OP_DATA record: unchecked size arithmetic in add()

  Bug

  cilium/tetragon#5614 · Filter by author AdeshDeshmukh opened on Sep 10, 2026
  3

• Wrap bytes.Reader() in the event delivery hotpath

  cilium/tetragon#5612 · Filter by author rafaelroquetto opened on Sep 10, 2026
  

• proto: store proc args in a repeated string

  cilium/tetragon#5611 · Filter by author rafaelroquetto opened on Sep 10, 2026
  

• Kprobe spec validation failures

  Enhancement

  cilium/tetragon#5598 · Filter by author Sammcb opened on Sep 9, 2026
  3

• consolidate per-sensor selector and action validation

  Enhancement

  cilium/tetragon#5590 · Filter by author AritraDey-Dev opened on Sep 8, 2026

• bprm_check_security with Override: one refused execve emits hundreds of PROCESS_LSM events (v1.7.1, single lsmhooks entry)

  Bug

  cilium/tetragon#5528 · Filter by author alexmonnerie-ys opened on Aug 31, 2026
  1

• Support lockdown=confidentiality (SecureBoot): use bpf_probe_read_kernel so bpf_exit_*.o can load

  cilium/tetragon#5507 · Filter by author WarrDoge opened on Aug 26, 2026