Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-23 11:12 UTC
  • Importiert: 2026-09-29 18:17 UTC
  • CVSS: 7.8
  • Quelle-ID: thn_global
  • uid_hash: 05915a6c65b559330b57cf02f4c6b3bd6f6611ccea7b92d2f72922f685494c41

Inhalt

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22.

The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not shipped the patch for its 26.04, 24.04, or 22.04 LTS releases. DepthFirst

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-80521

HIGH

7.8

HIGH

7.8

2026-08-26

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews