All-In-One: A Composable Attack on LLM Transformations

Quantization, pruning, and model merging are popular transformations applied to deployment-ready LLMs to improve efficiency and downstream performance. Recent work has shown that these transformations can introduce a security threat: an adversary can train a model that passes safety checks in its...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ixgbevf: A use-after-free issue was addressed in VEPA multicast source pruning. In ixgbevfcleanrxirq, frames whose source MAC matches the own address of the VF are pruned by freeing the skb and proceeding to the next descriptor...

Analyzing and Mitigating Poisoning Attacks on Flow-Based Intrusion Detection

Although Artificial Intelligence AI-based Intrusion Detection Systems IDSs are increasingly deployed in operational networks, their dependence on large-scale training data introduces a critical vulnerability to stealthy poisoning attacks. We demonstrate that latent backdoors can be successfully...

Understanding and Mitigating Token-Pruning-Induced Vulnerabilities in VLMs

Token-Pruning accelerates Vision-Language Models by removing redundant visual tokens, yet its safety implications remain underexplored. In this work, we present the first comprehensive safety evaluation of Token-Pruning mechanisms and find that: most pruning strategies significantly degrade safet...

CLSA-2026-1787221736 bind: Fix of 2 CVEs

CVE-2023-6516: bound the memory used to queue RBTDB tree-pruning events, so that recursive query patterns which continuously trigger cache-database maintenance can no longer exceed max-cache-size and exhaust host memory DoS - CVE-2023-6516 follow-up: make the tree-pruning queue per-node-lock...

SUSE CVE-2026-98085

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

SUSE CVE-2026-98019

In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise checkfuncarg allows bpfregisterisnull for nullable arguments w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitrary scala...

DEBIAN-CVE-2026-98085

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

AZL-104613 CVE-2026-98085 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

CVE-2026-98085

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

UBUNTU-CVE-2026-98085

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

CVE-2026-98085 bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

CVE-2026-98085

The Linux kernel contains a vulnerability in the BPF precision backtracking mechanism affecting BPF_LD | BPF_{IND,ABS} instructions. The root cause is that the backtrack_insn() function fails to handle the implicit exit case from a subprogram. Specifically, it does not call bt_subprog_enter() whe...

EUVD-2026-86915

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

CVE-2026-98085 bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

CVE-2026-98019 bpf: mark a NULL call argument precise

In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise checkfuncarg allows bpfregisterisnull for nullable arguments w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitrary scala...

CVE-2026-98019

The Linux kernel contains a vulnerability in the BPF subsystem where certain functions failed to mark underlying scalar registers as precise . Specifically, check_func_arg() allowed bpf_register_is_null() for nullable arguments without marking the register as precise, and check_helper_call() enfo...

CVE-2026-98019

In the Linux kernel, the following vulnerability has been resolved: bpf: mark a NULL call argument precise checkfuncarg allows bpfregisterisnull for nullable arguments w/o marking the underlying scalar register precise. Hence a checkpoint created on such a path would prune against arbitrary scala...

CVE-2026-98085: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions. These instructions are modelled as two branches: - fallthrough; -...

Linux Distros Unpatched Vulnerability : CVE-2026-98085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: backtrackinsn: Handle ldabs,ind subprog exit edge Nicholas Carlini reported a bug in precision backtracking mechanism for BPFLD | BPFIND,ABS instructions...