CVE-2026-53941: Allocation of Resources Without Limits or Throttling

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprobe library resolver can allow an unprivileged container to consume excessive CPU and block other containers from starting...

CVE-2026-16769

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

CVE-2026-16769

CVE-2026-16769 affects the RS9116W/SiWx917 (Silicon Labs), where an unencrypted 'pause encryption request' message can trigger a denial of service . The vulnerability is catalogued as B-E10 in the associated academic paper (arXiv:2409.02905 ). CVSS 4.0 scores it 7.1 (HIGH) with an adjacent-networ...

CVE-2026-16769 RS9116W/SiWx917 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

CVE-2026-16769 RS9116W/SiWx917 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

EUVD-2026-72878

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

PT-2026-87140

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

CVE-2026-16769: Expected Behavior Violation

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: btrfs: Fixed a race condition between balance operations and cancel/pause requests. Syzbot reported a panic that occurred as follows: Assertion failed: fsinfo-exclusiveoperation == BTRFSEXCLOPBALANCEPAUSED, in fs/btrfs/ioctl.c:46...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: btrfs: fixed the BUGON condition in btrfscancelbalance. Pausing and canceling balance can race to interrupt balance, leading to a BUGON panic in btrfscancelbalance. The BUGON condition in btrfs CancelBalance does not take this ra...

CVE-2026-75109

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

EUVD-2026-60388

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

CVE-2026-75109

Determined's API handlers in internal/api_generic_tasks.go lack authorization checks on generic task kill, pause, and unpause endpoints. Authenticated low-privilege users can terminate, pause, or unpause tasks owned by other users, causing high availability impact (CVSS 7.1 HIGH). Exploitation st...

CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

CVE-2026-75109 Determined Missing Authorization Check on Generic Task Endpoints

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

CVE-2026-75109: Missing Authorization

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

PT-2026-76803

Determined fails to authorize requests on the generic task kill, pause, and unpause endpoints in the API handlers. Authenticated attackers can disrupt other users' workloads by terminating, pausing, or unpausing tasks they do not own...

CVE-2026-65934

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related paper below...

CVE-2026-65934

CVE-2026-65934 affects the BT122 module; an unencrypted “pause encryption request” message can cause a denial of service. The vulnerability is described in multiple sources (NVD/CVE records and CVE history) with a CVSSv4 base score of 7.1 (HIGH) and an adjacent ATT&CK-like risk under the vulnerab...