174 matches found
CVE-2026-95183
An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...
EUVD-2026-102906
An issue in the context-compaction feature of DeepSeek Harness dsh commit c291e796 allows attackers to execute a prompt injection attack via crafted external content...
CVE-2026-95183
An issue in the context-compaction feature of DeepSeek Harness (dsh) , specifically within commit c291e796 , allows attackers to perform a prompt injection attack . This vulnerability is triggered through the processing of crafted external content . No specific remediation steps or exploit code w...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drivers/base/node.c: Fixed the issue of the compaction sysfs file leaking. The compaction sysfs file is created using compactionregisternode in registernode. However, we forgot to remove it in unregisternode. As a result, the...
OpenAI Reveals Six Model Incidents Involving Hidden Failures and Unauthorized Uploads
OpenAI on Wednesday disclosed six new instances of "unexpected or concerning model behavior" that took place over the past six months, while sharing a new framework for reporting, tracking, investigating, and disclosing model misalignment in a bid to improve transparency. "As AI systems grow more...
Red-Teaming Auto Mode: Improving Blocking Classifiers against Malign Coding Agents
To keep coding agents from going off the rails, production systems now review each proposed action with a blocking monitor that can reject it before it runs Auto Mode in Claude Code, Guardian in OpenAI's Codex. Prior evaluations of such monitors largely measure robustness to accidental harm or...
Exploit for Use After Free in Mozilla Firefox
CVE-2026-84118 — SpiderMonkey GC use-after-free Bug 2057457...
SUSE CVE-2026-72027
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
CVE-2026-77680
An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: Proper handling of freepagesprepare has been implemented in compactionfree. freepagesprepare may fail, but compactionfree does not handle this failure case. Pages that fail should not be added back to cc-freepages...
CVE-2026-72027
A flaw was found in the Linux kernel's memory management subsystem, specifically within the mm/compaction component. When the freepagesprepare function fails, the compactionfree function does not properly handle this error. This oversight can lead to pages that are either hardware poisoned...
CVE-2026-72027
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
UBUNTU-CVE-2026-72027
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
CVE-2026-72027
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
CVE-2026-72027 mm/compaction: handle free_pages_prepare() properly in compaction_free()
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
EUVD-2026-58985
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
PT-2026-72216
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory management compaction component where the compaction free function does not properly handle failure cases from the free pages prepare function. If free page...
CVE-2026-72027: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle freepagesprepare properly in compactionfree freepagesprepare can fail but compactionfree does not handle the failure case. Failed pages should not be added back to cc-freepages for future use, since they can...
etcd: etcd: Authorization bypass allows information disclosure and denial of service
A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...