GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds | RedEye Security
threat-intelligence.redeyesecurity.com
GhostLock (CVE-2026-43499) is a use-after-free in Linux futex priority-inheritance code that has shipped by default in nearly every distro since 2011. Nebula Security's public exploit turns any logged-in user into root with 97% reliability and escapes containers. Patching is the only real fix.
  • reluctant_squidd@lemmy.caEnglish
    1·
    2 days ago

    Would this affect a rootless podman container?

    I read the article, or at least most of it and didn’t see anything that hints either way.

    Seems to be more regarding specifically system authorized users able to elevate themselves to root.

    Unless I am missing something?