302 matches found
PT-2026-94838
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the dw-edma component of the dmaengine where the pause and resume functions read and update channel state without holding the vc.lock lock. Simultaneously,...
CVE-2026-53941: Allocation of Resources Without Limits or Throttling
Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprobe library resolver can allow an unprivileged container to consume excessive CPU and block other containers from starting...
CVE-2026-16769
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
CVE-2026-16769 RS9116W/SiWx917 plaintext pause encryption request causes DOS
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
EUVD-2026-72878
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
CVE-2026-16769 RS9116W/SiWx917 plaintext pause encryption request causes DOS
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
CVE-2026-16769
CVE-2026-16769 affects the RS9116W/SiWx917 (Silicon Labs), where an unencrypted 'pause encryption request' message can trigger a denial of service . The vulnerability is catalogued as B-E10 in the associated academic paper (arXiv:2409.02905 ). CVSS 4.0 scores it 7.1 (HIGH) with an adjacent-networ...
CVE-2026-16769: Expected Behavior Violation
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
PT-2026-87140
An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition between balance operations and cancel/pause requests. Syzbot reported a panic that occurred as follows: Assertion failed: fsinfo-exclusiveoperation == BTRFSEXCLOPBALANCEPAUSED, in fs/btrfs/ioctl.c:46...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the BUGON condition in btrfscancelbalance. Pausing and canceling balance can race to interrupt balance, leading to a BUGON panic in btrfscancelbalance. The BUGON condition in btrfs CancelBalance does not take this ra...
CVE-2026-75109
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...
CVE-2026-75109
Determined's API handlers in internal/api_generic_tasks.go lack authorization checks on generic task kill, pause, and unpause endpoints. Authenticated low-privilege users can terminate, pause, or unpause tasks owned by other users, causing high availability impact (CVSS 7.1 HIGH). Exploitation st...
CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...
CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...
EUVD-2026-60388
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...
CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...
PT-2026-76803
Name of the Vulnerable Software and Affected Versions Determined affected versions not specified Description Authenticated attackers can disrupt the workloads of other users because the API handlers fail to authorize requests on the generic task kill, pause, and unpause endpoints. This allows an...
CVE-2026-75109: Missing Authorization
Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...