15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-07-08 06:16 UTC
  • Importiert: 2026-07-14 08:57 UTC
  • CVSS: 7.8
  • Quelle-ID: thn_global
  • uid_hash: 38ebd0432a6bb240f17de092825e5d722b9bc29ef32fd65b89199a8ef0ad59cd

Inhalt

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.

The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-43499

HIGH

7.8

HIGH

7.8

2026-05-21

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews