Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the is in scope condition. This advisory only affects JSON-formatted Cedar policy templates containing is in scope conditions that are malformed according to the...

PT-2026-121949

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset cgrp subsys.root in is in v2 mode After seeing the patch 1 to guard is in v2 mode with RCU, it makes me realize that is in v2 mode may be called in a context where a new cgroup filesystem is bei...