Vulnerabilities

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

CVE-2026-43499 (GhostLock) exposes a 15-year-old Linux kernel locking flaw enabling any local user to achieve root and escape containers—affecting virtually every mainstream distribution since 2011 and demanding immediate patching.

Summary written by editorial AI · Source link below

Filed by THN (Feedburner)8 July 20261 min readRead at source ↗

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.

The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

Editorial Analysis

Why it matters

Nearly universal Linux distribution exposure combined with local-to-root escalation and container escape makes this one of the most impactful kernel vulnerabilities in recent years.

What to do

Initiate emergency patching of all Linux hosts and container infrastructure for CVE-2026-43499 and validate remediation within 72 hours.

Board brief

A newly disclosed 15-year-old Linux kernel vulnerability allows full system takeover and container escape, requiring immediate enterprise-wide patching.

Forward-looking interpretation drafted by editorial AI under human review — not a reproduction of the source. See methodology.

Continue at the source

Read the full report at THN (Feedburner)

External link — opens at THN (Feedburner) in a new tab.

Continue with

Editorial Analysis

More from the Vulnerabilities Desk