798 matches found
CVE-2026-61711: Improper Input Validation
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
PT-2026-78679
Name of the Vulnerable Software and Affected Versions BuildKit versions prior to 0.31.1 Description BuildKit is a toolkit used to convert source code into build artifacts. A custom frontend can send a crafted build request containing an invalid SecurityMode value. The executor/oci/spec linux.go...
CVE-2026-61711: Improper Input Validation
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/speclinux.go treated the unsupported value as a...
Hulios v2.0.0-rc.4
Hulios Hardened Universal Linux Invisibility and Onion System Hulios is an eBPF-powered, transparent Tor VPN gateway for Linux. It secures outbound network traffic by redirecting TCP sockets and DNS queries through an embedded Arti Tor client instance and a localized Hickory-based DNS resolver. B...
CVE-2026-68171
A flaw was found in the Linux kernel's arm64 syscall handling. A local attacker with the ability to trace processes using ptrace could manipulate syscall arguments after security checks like seccomp, or secure computing mode have been performed. This occurs because the kernel's internal record of...
CVE-2026-68171
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
EUVD-2026-55557
In the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 "arm64: add seccomp support", seccomp was erroneously called before the ptrace...
CVE-2026-68171 arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates
In the Linux kernel, the following vulnerability has been resolved: arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 "arm64: add seccomp support", seccomp was erroneously called before the ptrace...
CVE-2026-68171
The CVE describes an arm64 Linux kernel issue where the original x0 saved in orig_x0 could diverge from the live x0 when a tracer (ptrace/seccomp/audit) updated the syscall argument during a syscall-enter-stop. The fix re-syncs orig_x0 from x0 on syscall entry after a potential ptrace stop (PTRAC...
PT-2026-69571
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where the saved value of register x0 is not kept in sync with updates made by a tracer. On arm64, register x0 holds both the first argument of a...
Linux Distros Unpatched Vulnerability : CVE-2026-68171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates When seccomp support was originally added to arm64 in a1ae65b21941 arm64: add seccomp suppor...
MiracleLinux 9 : oci-seccomp-bpf-hook-1.2.11-2.el9_8 (AXSA:2026-1476:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1476:01 advisory. net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME CVE-2026-33811 Tenable has extracted the preceding description block...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
CVE-2026-18107
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
EUVD-2026-49986
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
CVE-2026-18107
CRIU vulnerability CVE-2026-18107 involves how CRIU handles restartable sequences (rseq) during checkpoint/restore. A container-embedded process can register an rseq critical section that hijacks CRIU’s parasite code injection, enabling spoofed credentials saved in the checkpoint image. On restor...
CVE-2026-18107 Criu: criu: container escape via rseq critical section hijack during checkpoint/restore
A flaw was found in CRIU's handling of restartable sequences rseq during checkpoint/restore. A malicious process inside a container can register an rseq critical section that hijacks CRIU's parasite code injection during checkpoint, allowing it to spoof the process credentials saved in the...
PT-2026-65571
Name of the Vulnerable Software and Affected Versions CRIU affected versions not specified Description An issue exists in the handling of restartable sequences rseq during the checkpoint/restore process. A malicious process within a container can register an rseq critical section to hijack the...
Z-Jail v1.1.0
Z-Jail Multi-layer sandbox for native code execution on Linux. Seven independent defence layers — no external dependencies, 73 KiB PIE binary. root@kitploit: ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ Truthimatics...