GHSA-JW2V-CQ5X-Q68G Pterodactyl improperly locks resources allowing raced queries to create more resources than alloted

Summary Pterodactyl implements rate limits that are applied to the total number of resources e.g. databases, port allocations, or backups that can exist for an individual server. These resource limits are applied on a per-server basis, and validated during the request cycle. However, it is possib...

ROS-20260120-7319

Vulnerability in kernel-lt related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7318

Vulnerability in kernel-lt related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260120-7337

A vulnerability in the skbget function of the Linux kernel is related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260120-7340

A vulnerability in the memoryhotplug component of the Linux kernel is related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260120-73-0002

A vulnerability in the smb2lock function of the fs/smb/server/smb2pdu.c module of the Linux kernel is related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Improper Resource Locking

Overview pterodactyl/panel is a game management panel. Affected versions of this package are vulnerable to Improper Resource Locking due to the validation occuring early in the request cycle and not locking the target resource while it is processing. An attacker can exhaust system resources and...

CVE-2025-69198 Pterodactyl's improper resource locking allows raced queries to create more resources than alloted

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources e.g. databases, port allocations, or backups that can exist for an individual server. These resource limits are applied on a per-server basis, and...

CVE-2025-69198 Pterodactyl's improper resource locking allows raced queries to create more resources than alloted

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources e.g. databases, port allocations, or backups that can exist for an individual server. These resource limits are applied on a per-server basis, and...

CVE-2025-69198 Pterodactyl's improper resource locking allows raced queries to create more resources than alloted

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources e.g. databases, port allocations, or backups that can exist for an individual server. These resource limits are applied on a per-server basis, and...

ROS-20260119-7372

A vulnerability in the ethernet/hisilicon/hns3 components of the Linux operating system kernel involves improper resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Pterodactyl Panel security vulnerabilities

Pterodactyl Panel is an open-source game server management panel developed by Pterodactyl. Versions of Pterodactyl Panel prior to 1.12.0 contained security vulnerabilities. These vulnerabilities stemmed from resource limit verification occurring early in the request cycle and failing to lock down...

Junos OS DoS

The vulnerability of Junos OS routers of the SRX series lies in improper resource locking. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

ROS-20260114-7319

A vulnerability in the Linux operating system kernel is related to incorrect resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7315

A vulnerability in the fecsetmacaddress function of the drivers/net/ethernet/freescale/fecmain.c module of the Linux operating system kernel is related to insufficient resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7333

A vulnerability in the mt7921macresetwork function of the drivers/net/wireless/mediatek/mt76/mt7921/mac.c module of the Linux operating system kernel is related to insufficient resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260112-7344

A vulnerability in the ks8851irq function of the drivers/net/ethernet/micrel/ks8851common.c module of the Linux operating system kernel is related to insufficient resource locking. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

MongoDB Resource Locking DoS

The vulnerability of the MongoDB database management system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

Linux kernel Heap Corruption

The vulnerability of the imxsckeyaction function in the drivers/input/keyboard/imxsckey.c module of the imxsckey keyboard driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to damage memory...

Linux nfs_open_local_fh Heap Buffer Overflow DoS

The vulnerability of the nfsopenlocalfh function in the fs/nfscommon/nfslocalio.c module of the Linux kernel is related to improper resource locking. Exploiting this vulnerability could allow an attacker to cause service failures...