airgap

airgap Security for the modern AI age. No security layer is perfect. airgap is still experimental. Contributions welcome! Protected secrets airgap launches a target program e.g. an AI coding agent inside its own mount namespace and transparently replaces secrets with redacted versions. A program...

CVE-2024-21626

Usage: 1.git clone https://github.com/cdxiaodong/CVE-2024-21626 2.docker-compose up Verification: If you can obtain the host's /etc/passwd, the vulnerability exists. Environment: runc: =v1.0.0-rc93,=1.1.11 Attack details & principle: In affected versions of runc, during initialization, some...

CVE-2026-98989

A flaw was found in the Linux kernel. A local user can exploit this vulnerability by performing recursive bind mounts containing mount namespace file descriptors, bypassing loop detection mechanisms. This issue creates cyclical mount references, preventing the kernel from freeing associated...

CVE-2026-98988

A flaw was found in the Linux kernel. When creating a new mount namespace using the opentree system call, child and covered mounts are not properly preserved during namespace copying. A local attacker can exploit this vulnerability to reveal and access sensitive filesystem paths intentionally...

CVE-2026-98986

A flaw was found in the Linux kernel's mount namespace subsystem. When cleaning up a mount namespace associated with filesystem notification marks, the kernel improperly attempts to acquire a sleeping lock within an invalid interrupt context. A local user with privileges to manage mount namespace...

CVE-2026-99170

A flaw was found in the Linux kernel. A local user with the ability to create user namespaces can bypass locked mount protections when transferring locks beneath existing mounts. By binding a mount namespace file beneath a locked cover and creating a new mount namespace, the covering mount is...

CVE-2026-98987

A flaw was found in the Linux kernel's mount namespace subsystem. A local user with mount privileges can trigger this issue during recursive mount operations when the topmost mount in a chain is a mount namespace file. Because the kernel fails to inspect the topmost mount in the chain, propagated...

CVE-2026-98995

A flaw was found in the Linux kernel. A local user can cause a denial of service DoS or potentially escalate privileges by triggering a use-after-free condition in the mount namespace subsystem. When moving file system mount points, the kernel fails to clear a reference pointer on the former pare...

CVE-2026-98993

A flaw was found in the Linux kernel's mount namespace subsystem. A local attacker can trigger an unmount flag inheritance issue when cloning a lazily unmounted mount that is kept open by a file descriptor. This improper flag inheritance leads to incorrect reference counting and a use-after-free...

CVE-2026-98978

A flaw was found in the Linux kernel's mount namespace subsystem. This issue allows a local attacker to cause an information disclosure by exposing files and directories protected by locked mounts. When an unlocked ancestor mount is unmounted, the kernel improperly allows locked submounts to expi...

SUSE CVE-2026-98976

In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved beneath attachrecursivemnt transfers MNTLOCKED from the top mount to the mount that is moved beneath it with MOVEMOUNTBENEATH. This allows the owner of a user...

SUSE CVE-2026-98989

In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount for mount namespace loops doloopback refuses to bind mount the file of a mount namespace that is as old as the caller's or older because a mount namespace that holds a mount of its own file...

SUSE CVE-2026-99170

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

DEBIAN-CVE-2026-99170

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

CVE-2026-99170

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

CVE-2026-99170

A flaw in the Linux kernel allows a local user with the ability to create user namespaces to bypass locked mount protections when transferring locks beneath existing mounts. By binding a mount namespace file beneath a locked cover and creating a new mount namespace, an attacker can cause the cove...

CVE-2026-99170 namespace: a mount that copy_tree() leaves out can't take over a lock

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

CVE-2026-99170 namespace: a mount that copy_tree() leaves out can't take over a lock

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

EUVD-2026-111922

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...

CVE-2026-99170

In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copytree leaves out can't take over a lock Since commit c62a4766937e "movemount: transfer MNTLOCKED" a mount can be moved beneath a locked mount. The lock moves from the old cover to the new mount which...