15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability that enables local users to escalate privileges to root and escape containers, affecting most Linux distributions since 2011. The flaw stems from a use-after-free condition in kernel threading code, allowing reliable exploitation without special permissions or network access. Although no in-the-wild exploitation has been reported, a public exploit has been released, increasing the risk. The vulnerability is particularly dangerous when chained with remote entry vectors like browser exploits, such as the Firefox flaw CVE-2026-10702.

AI-extracted · verify before operational use