sandboxec

sandboxec Un bac à sable léger pour les commandes Linux, construit sur Landlock. Pas de démon. Pas de root. Pas de construction d’image. Utilisez-le pour exécuter des commandes risquées avec un rayon d’explosion réduit : CLI tierces, scripts non fiables, code généré et outils ponctuels. Objectif...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778266904)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778266904 advisory. - In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix pathlist memory leak Clang static analys...

cplt

cplt Песочница с принудительным применением на уровне ядра для ИИ-агентов, пишущих код. cplt оборачивает GitHub Copilot CLI, OpenCode, Gemini CLI, Antigravity CLI, Pi, Claude Code, goose, DeepSeek Harness или любую оболочку, чтобы агент мог писать код, но не мог украсть учётные данные, запушить в...

CVE-2026-97594

A flaw was found in the Linux kernel's Landlock security module. A missing reference lock allows a race condition to occur when validating directory permissions during file linking operations. A local attacker could exploit this by executing concurrent file link and rename requests to trigger a...

CVE-2026-101078

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078

A vulnerability exists in deepseek-ai deepseek-harness versions up to 0.1.7-rc.2 within the Landlock Backend component. The issue stems from an unknown function in the file packages/sandbox/sandbox-local/src/profiles.ts, which can lead to improper isolation or compartmentalization . Exploitation ...

EUVD-2026-88334

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078 deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078 deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078: Improper Isolation or Compartmentalization

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

PT-2026-99918

Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.7-rc.2 Description A flaw in the Landlock Backend component, specifically within the packages/sandbox/sandbox-local/src/profiles.ts file, allows for improper isolation or compartmentalization...

AZL-104747 CVE-2026-97594 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

DEBIAN-CVE-2026-97594

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-97594

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

UBUNTU-CVE-2026-97594

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

EUVD-2026-86902

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-97594

The Linux kernel contains a use-after-free vulnerability in the landlock LSM. The current_check_refer_path() function reads old_dentry->d_parent without holding a reference or lock, leading to a race condition during filename_linkat(). Because hook_path_link() does not lock the parent, a concu...

CVE-2026-97594 landlock: Fix use-after-free of the source's parent directory

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-97594 landlock: Fix use-after-free of the source's parent directory

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-97594

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...