sandbox-runtime

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...

fence

Fence wraps commands in a sandbox that blocks network access by default and restricts filesystem operations based on configurable rules. It's most useful for running semi-trusted code package installs, build scripts, CI jobs, unfamiliar repos with controlled side effects, and it can also compleme...

CVE-2026-65584

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful...

CVE-2026-65584 GPU DDK - Stack Buffer Overflow via undersized UFO address array in DumpStalledContextInfo

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful...

CVE-2026-65584

A stack buffer overflow vulnerability exists in the GPU DDK when a non-privileged user makes improper GPU system calls. The issue occurs in the DumpStalledContextInfo function during the processing of resolved Linux/Android fence synchronization checkpoints , as user checkpoints are excluded from...

CVE-2026-65584: Imagination Technologies Graphics DDK: Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in…

Software installed and run as a non-privileged user may conduct improper GPU system calls causing a stack overflow in the kernel. The overflow occurs when processing resolved Linux/Android fence synchronization checkpoints, while user checkpoints are excluded from the stack array. Successful...

CVE-2026-99148

A flaw was found in the Linux kernel's AMD GPU driver amdgpu. When closing a handle to a shared graphics buffer object, the driver prematurely detaches its eviction fence before verifying whether active references remain. A local user could exploit this vulnerability to trigger the premature...

CVE-2026-99148

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

CVE-2026-99148

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

CVE-2026-99119

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This was supposed to loop over the individual evicted list, as the kernel and alwaysvalid evicted lists were already handled in amdgpuvmvalidate. Without this, BOs that were created a...

CVE-2026-99148

The Linux kernel 's amdgpu driver contains a vulnerability where amdgpu_gem_object_close() prematurely detaches the user queue eviction fence from a Buffer Object (BO) before verifying the bo_va->ref_count . This allows a BO to be evicted while other handles or mappings are still in use, poten...

CVE-2026-99148 drm/amdgpu: keep the eviction fence until the last handle is closed

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

CVE-2026-99148 drm/amdgpu: keep the eviction fence until the last handle is closed

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

EUVD-2026-111900

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...

CVE-2026-99119

The Linux kernel contains a vulnerability in the drm/amdgpu/userq component where buffer objects (BOs ) created and evicted before a userq was made were not correctly included in an eviction fence rearm. The fix involves ensuring the kernel loops over the individual evicted list, as kernel and al...

EUVD-2026-112019

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This was supposed to loop over the individual evicted list, as the kernel and alwaysvalid evicted lists were already handled in amdgpuvmvalidate. Without this, BOs that were created a...

CVE-2026-99119 drm/amdgpu/userq: actually validate userq BOs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This was supposed to loop over the individual evicted list, as the kernel and alwaysvalid evicted lists were already handled in amdgpuvmvalidate. Without this, BOs that were created a...

CVE-2026-99119 drm/amdgpu/userq: actually validate userq BOs

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: actually validate userq BOs This was supposed to loop over the individual evicted list, as the kernel and alwaysvalid evicted lists were already handled in amdgpuvmvalidate. Without this, BOs that were created a...

Linux Distros Unpatched Vulnerability : CVE-2026-99148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks...

CVE-2026-99148: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last…

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: keep the eviction fence until the last handle is closed amdgpugemobjectclose detaches the user queue eviction fence from the BO before it checks bova-refcount, so closing any handle of a BO removes the fence, even whe...