NewsThe Hacker News

    15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

    Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

    Affected vendors and products

    More on GhostLock

    Other news entries

    Source: https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html

    ID