GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years
A critical Linux kernel vulnerability named GhostLock (CVE-2026-43499) has been identified, affecting all major distributions for the past 15 years. The flaw allows unprivileged local attackers to perform privilege escalation and container escapes.
Why it matters
Because the vulnerability existed for over a decade in the core of the Linux kernel, it represents a massive security risk for global server infrastructure and cloud environments.
Need something less technical? Take a quick look at our bug summary.
The article provides a technical breakdown of a security vulnerability without political or social framing.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in