18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
A use-after-free flaw in Linux's SCTP networking code, present since kernel 2.6.25 in 2008, was disclosed publicly on August 6 as CVE-2026-64564 and named SCTPhantom by Tencent Zhuque Lab, which reported gaining root on tested builds of Debian 13, Ubuntu...