CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

EUVD-2026-85307

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross versions 1.0.0 through 2.x before 2.7.2 are vulnerable to a memory exhaustion denial of service. The albatross-console component fails to properly terminate when looping over its internal ring buffer (default 1024 lines). A user with permissions to send console subscription comman...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609: Allocation of Resources Without Limits or Throttling

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

OSEC-2026-09 Albatross-console memory exhaustion

Albatross-console doesn't properly terminate when looping over the ringbuffer. This leads to denial of service and memory exhaustion. Scenario A user that has access to albatross-console either via the unix domain socket requires root:albatross by default or via albatross-tls-endpoint requires a...

PT-2026-47181

Albatross-console doesn't properly terminate when looping over the ringbuffer. This leads to denial of service and memory exhaustion. Scenario A user that has access to albatross-console either via the unix domain socket requires root:albatross by default or via albatross-tls-endpoint requires a...

PT-2026-97337

Name of the Vulnerable Software and Affected Versions Robur Albatross versions 1.0.0 through 2.7.1 Description A flaw in the ring buffer logic of albatross-console allows a user to trigger an infinite loop when the buffer is full 1024 lines, leading to denial of service and memory exhaustion. Thi...

OSEC-2025-01 Albatross console out of memory

Background Albatross-console reads the console output from multiple unikernel tenders solo5-hvt. This console output can be retrieved using albatross-client. The console protocol is fairly simple: the unikernel invokes a PUTS hypercall, which sends arbitrary bytes of given length to the unikernel...

PT-2025-54768

Background Albatross-console reads the console output from multiple unikernel tenders solo5-hvt. This console output can be retrieved using albatross-client. The console protocol is fairly simple: the unikernel invokes a PUTS hypercall, which sends arbitrary bytes of given length to the unikernel...