container escape news
2 stories
CVE-2026-64564high
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
A significant vulnerability has been identified and patched in the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation. The flaw, a use-after-free bug present for 18 years, could allow local users to escalate their privileges to root and potentially escape containerized environments. Researchers from Tencent are credited with discovering and demonstrating the…

CVE-2026-43499critical
15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros
A Linux kernel vulnerability, present for 15 years and now publicly disclosed as CVE-2026-43499, has been identified by Nebula Security. This flaw, dubbed GhostLock, allows any authenticated user on an unpatched system to escalate their privileges to root and to break out of containerized environments.