Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents

Coding agents that run long enough must compact their context, summarizing the conversation, discarding the original, and carrying the summary forward as memory. We show that in popular open-source coding agents this step is an exploitable trust boundary. Harnesses that flatten the typed...

CVE-2026-95183

An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...

PT-2026-115625

Name of the Vulnerable Software and Affected Versions DeepSeek Harness dsh version c291e796 Description An issue in the context-compaction feature allows attackers to perform a prompt injection attack by using specially crafted external content. Prompt injection is a technique where an attacker...

CVE-2026-95183

An issue in the context-compaction feature of DeepSeek Harness (dsh) , specifically within commit c291e796 , allows attackers to perform a prompt injection attack by providing crafted external content. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). No specif...

CVE-2026-95183

An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...

EUVD-2026-102906

An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...

CVE-2026-95183: Undefined Security Weakness

An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drivers/base/node.c: Fixed the issue of the compaction sysfs file leaking. The compaction sysfs file is created using compactionregisternode in registernode. However, we forgot to remove it in unregisternode. As a result, the...

OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads

OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more...

Red-Teaming Auto Mode: Improving Blocking Classifiers against Malign Coding Agents

To keep coding agents from going off the rails, production systems now review each proposed action with a blocking monitor that can reject it before it runs Auto Mode in Claude Code, Guardian in OpenAI's Codex. Prior evaluations of such monitors largely measure robustness to accidental harm or...

Exploit for Use After Free in Mozilla Firefox

CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457...

SUSE CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: Proper handling of freepagesprepare has been implemented in compactionfree. freepagesprepare may fail, but compactionfree does not handle this failure case. Pages that fail should not be added back to cc-freepages...

CVE-2026-72027

A flaw was found in the Linux kernel's memory management subsystem, specifically within the mm/compaction component. When the freepagesprepare function fails, the compactionfree function does not properly handle this error. This oversight can lead to pages that are either hardware poisoned...

CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

UBUNTU-CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

CVE-2026-72027

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...

EUVD-2026-58985

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...