cplt

cplt 面向 AI 编码代理的内核级强制沙箱。 cplt 封装 GitHub Copilot CLI、OpenCode、Gemini CLI、Antigravity CLI、Pi、Claude Code、goose、DeepSeek Harness 或任意 shell，使代理可以编写代码，但无法窃取凭据、推送到 main、合并 PR 或外泄机密。 macOS ：通过 sandbox-exec 使用 Apple Seatbelt/SBPL Linux ：Landlock LSM + seccomp-BPF + 可选的 Bubblewrap 命名空间隔离（内核 5.13+，6.7+...

CVE-2026-89560 landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation

In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this name does not exist in the unified view, even if it is present in on...

CVE-2026-89560

CVE-2026-89560 affects the Linux kernel Landlock security module , specifically the permission checks for whiteout object creation in the upper layer of OverlayFS (fuse-overlayfs). Two flaws exist: first, mknod(2) with S_IFCHR/makedev(0,0) was guarded by LANDLOCK_ACCESS_FS_MAKE_CHAR instead of th...

EUVD-2025-13215

Malicious code in bioql PyPI...

CVE-2023-53055

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...

CVE-2023-53055

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...

CVE-2023-53055 fscrypt: destroy keyring after security_sb_delete()

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...

CVE-2023-53055: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after securitysbdelete fscryptdestroykeyring must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landloc...