conduit

Conduit The on-prem control plane for AI coding agents. Per-engineer cost attribution · hard budgets · egress governance · context-rot observability · audit-ready exports — all inside your VPC. Conduit sits between your AI coding agents Claude Code, Cursor, Codex, Aider and whatever provider you...

FreeBSD : conduit -- account takeover vulnerability (0ef2a442-bd49-11f1-bbb3-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0ef2a442-bd49-11f1-bbb3-901b0e9408dc advisory. Conduit team reports: Fixes a vulnerability allowing an attacker with an account on the server to gain...

conduit -- account takeover vulnerability

Conduit team reports: Fixes a vulnerability allowing an attacker with an account on the server to gain access to any other account. It is recommended you upgrade ASAP...

FreeBSD : conduit -- authentication bypass vulnerability (1ff5a036-a13e-11f1-a129-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1ff5a036-a13e-11f1-a129-901b0e9408dc advisory. Conduit team reports: Fixes a vulnerability where endpoints which required authentication, but...

conduit -- authentication bypass vulnerability

Conduit team reports: Fixes a vulnerability where endpoints which required authentication, but functionality do not depend on the user/server calling it, could have their authentication bypassed, as well as causing crashes for all other authenticated endpoints. It is recommended you upgrade ASAP...

Linux Distros Unpatched Vulnerability : CVE-2026-53323

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats...

SUSE CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

UBUNTU-CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323 net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323 net: dsa: remove redundant netdev_lock_ops() from conduit ethtool ops

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

EUVD-2026-39858

In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdevlockops from conduit ethtool ops DSA replaces the conduit master device's ethtoolops with its own wrappers that aggregate stats from both the conduit and DSA switch ports. Taking the lock again...

CVE-2026-53323

CVE-2026-53323 affects the Linux kernel DSA conduit ethtool wrappers. The root cause is redundant locking: the conduit master’s ethtool_ops were wrapped by DSA to aggregate port stats, and an extra netdev_lock_ops()/netdev_unlock_ops() inside the DSA wrappers could deadlock. The documented remedi...

PT-2026-52962

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the Distributed Switch Architecture DSA component when the system replaces the conduit device's ethtool ops with wrappers designed to aggregate statistics from the...

OPENSUSE-SU-2026:11086-1 ghc-xml-conduit-1.10.1.0-2.1 on GA media

These are all security issues fixed in the ghc-xml-conduit-1.10.1.0-2.1 package on the GA media of openSUSE Tumbleweed...

fsdtorch (>=0.1.0, <=0.1.2.1), torch-conduit (>=0.1.1, <=0.1.6) +1 more potentially affected by CVE-2026-40491 via gdown (3.15.0)

gdown PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - fsdtorch =0.1.0, =0.1.1, =1.2.0, =1.3.0 Source cves: CVE-2026-40491 Source advisory: OSV:PYSEC-2026-2158...

fsdtorch (>=0.1.0, <=0.1.2.1), torch-conduit (>=0.1.1, <=0.1.6) +1 more potentially affected by CVE-2026-40491 via gdown (3.15.0)

gdown PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gdown and may be impacted: - fsdtorch =0.1.0, =0.1.1, =1.2.0, =1.3.0 Source cves: CVE-2026-40491 Source advisory: OSV:GHSA-76HW-P97H-883F...