15-Year-Old Ghost Lock Flaw Enables Root and Container Escape on Most Linux Distros
Researchers at Nebula Security disclosed GhostLock (CVE-2026-43499), a use-after-free flaw in Linux kernel futex priority inheritance code that has shipped by default in mainstream distributions since 2011 and lets any logged-in local user gain root;...