GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds

GhostLock (CVE-2026-43499) is a use-after-free in Linux futex priority-inheritance code that has shipped by default in nearly every distro since 2011. Nebula Security

st3ph3n 6 points 3 months ago

It's been a rough few weeks for kernel vulnerabilities.

save

path: 0 24669983, hotness: undefined, score: 6, children: 0

bigkahuna1986 6 points 3 months ago

Since it's been there from 2011, any chance I can get root on my old android tablet with this?

save

path: 0 24671857, hotness: undefined, score: 6, children: 0

reluctant_squidd 3 points 3 months ago

Would this affect a rootless podman container?

I read the article, or at least most of it and didn’t see anything that hints either way.

Seems to be more regarding specifically system authorized users able to elevate themselves to root.

Unless I am missing something?

save

path: 0 24670547, hotness: undefined, score: 3, children: 2

db0 1 point 3 months ago

It says it can escape containers so I assume it can

save

path: 0 24670547 24676022, hotness: undefined, score: 1, children: 1

reluctant_squidd 1 point 3 months ago

Yeah. Probably. Just wasn’t sure if the extra abstraction rootless is supposed to provide would affect it. I assume not.

save

path: 0 24670547 24676022 24682306, hotness: undefined, score: 1, children: 0

linux

@discuss.tchncs.de

Everything about Linux

RULES

Be nice to each other.
No memes or pictures of Linux in the wild.

go to feed...

linux

@discuss.tchncs.de

Everything about Linux

RULES

Be nice to each other.
No memes or pictures of Linux in the wild.

go to feed...