CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: One Byte in the BPF Verifier to Container Escape I found a soundness bug in the Linux BPF verifier - a + 1 in a pushstack call that causes the verifier to skip an ALU instruction on a forked path. For BPFOR, this means the verifier tracks dst = 0 while the CPU computes 0 | K = K. ...

SecOPD

SecOPD: Mitigating Adaptive Prompt Injections by On-Policy Distillation Yibo Peng · Long Lian · David Wagner† · Sizhe Chen† † Joint supervision. Paper Project page Model This release implements the paper's final full-response KL formulation, also described as the no-parsing variant. The student...

essh

ESSH Un espacio de trabajo SSH con sesiones persistentes y paneles de estado en vivo. Mantén los shells remotos en ejecución a través de caídas de conexión, cambia entre hosts con teclas o el ratón, y comprueba el estado del sistema sin salir de tu terminal. ESSH usa OpenSSH para las conexiones y...

CVE-2026-104437

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104430

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP1 through OP16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using...

CVE-2026-104437 Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104437 Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104437

The Zebra node (versions before 4.4.0 ) is vulnerable to a consensus divergence vulnerability in V5 transparent signature verification. The root cause is that Zebra computes a ZIP-244 digest for SIGHASH_SINGLE inputs that lack corresponding outputs instead of failing, whereas zcashd correctly rej...

CVE-2026-104437 Zebra before 4.4.0 Consensus Split via SIGHASH_SINGLE Missing-Output Handling

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

EUVD-2026-91447

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104435 Zebra 4.4.0 Consensus Divergence via V5 SIGHASH_SINGLE Without Output

Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASHSINGLE that lack a corresponding output. Attackers can broadcast crafted V5 transactions with more inputs than outputs that Zebra accepts but zcashd rejects,...

EUVD-2026-91441

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP1 through OP16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using...

CVE-2026-104430

The software zebra zebrad 4.5.0 and zebra-script 7.0.0 contains a vulnerability where P2SH redeem script signature operations are counted in legacy mode instead of the accurate P2SH mode used by zcashd . This causes CHECKMULTISIG preceded by OP_1 through OP_16 to be overcounted as 20 sigops, lead...

CVE-2026-104430 Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP1 through OP16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using...

CVE-2026-104430 Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP1 through OP16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using...

CVE-2026-104437: Improper Verification of Cryptographic Signature

Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASHSINGLE inputs lacking corresponding outputs instead of failing. Attackers can craft V5 transactions with fewer outputs than inputs that Zebra accepts an...

CVE-2026-104430: Function Call with Incorrectly Specified Arguments

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP1 through OP16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends using...

PT-2026-104241

Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded by OP 1 through OP 16 as 20 sigops and causing a consensus divergence. Remote attackers can broadcast P2SH spends usi...

AZL-102989 CVE-2026-90401 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...

CVE-2026-90401

In the Linux kernel, the following vulnerability has been resolved: md: remove REQNOWAIT support from raid1/10/456 REQNOWAIT support in md personalities that can block internally is fundamentally incomplete. While reads can avoid some blocking paths, write requests can still encounter cases where...