CVE-2026-31890

A flaw was found in Inspektor Gadget. The transfer mechanism of data from eBPF programs to userspace is based on a ring-buffer on Linux kernel versions newer than or equal to 5.8. The size of the ring-buffer is hard-coded to 256KB, and when gadgetreservebuf fails due to insufficient space, the...

CVE-2026-31890

creationtimestamp| type| source ---|---|--- 2026-03-12 19:48:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgv67mbie52e...

CVE-2026-31890 Inspektor Gadget: Tracing Denial of Service via Event Flooding

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. Prior to 0.50.1, in a situation where the ring-buffer of a gadget is – incidentally or maliciously – already full, the gadget will silently drop events. Th...