Vulnerabilitycritical
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-10702 | JIT miscompilation in the JavaScript Engine | 4.3 | <1% | ||
| CVE-2026-31431 | Local Privilege Escalation (Copy Fail) in Linux Kernel algif_aead Interface | 7.8 | 98% | KEVPoC ×13 | KEV |
| CVE-2026-43499 | Linux kernel: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock… | 7.8 | 5% | PoC ×21 | |
| CVE-2026-46242 | Linux kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF ep_remove() (via ep_remove_file()) cleared… | 7.8 | 5% | PoC | |
| CVE-2026-53166 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | — | — |
From the original article
3 min read at thehackernews.comResearchers at Nebula Security have disclosed GhostLock ( CVE-2026-43499 ), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distribution since 2011.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.