MEDIUMVulnerability
Global

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

·Source: The Hacker News

Updated:

Executive Summary

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

Analysis

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

Indicators of Compromise (1)

CVE (1)
CVE-2026-43499
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Jul 8, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Australia sets out long-term direction for A2A payments

The Account-to-Account (A2A) Payments Roundtable has today released its A2A payments vision, incorporating feedback from a public consultation and ongoing engagements with a broad range of end-users and other stakeholders on Australia’s A2A payments system.

Finextra
MEDIUMVulnerabilityNEW

Euroclear to acquire Uptevia

Euroclear today announces that it has entered into exclusive negotiations to acquire Uptevia, a leading French corporate trust services provider.

Finextra
MEDIUMVulnerabilityNEW

UK fintech Kord raises £6.4 million

Kord, a UK-based fintech focused on identity verification and payment processing for high value real estate transactions, has raised £6.4 million in Series A funding led by Guinness Ventures, with Beringea, SFC Capital, and angel investors also joining.

Finextra