“GhostLock” flaw survived in the Linux kernel code for 15 years

A Linux kernel vulnerability remained hidden in virtually every major Linux distribution for more than 15 years before being fixed earlier this year. The flaw, tracked as CVE-2026-43499 and dubbed GhostLock, can be exploited by an unprivileged local attacker to gain root privileges and escape containers. It has earned its discoverers at Nebula Security a …

The post “GhostLock” flaw survived in the Linux kernel code for 15 years appeared first on CyberInsider.