Nebusec Research company blog
GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
GhostLock (CVE-2026-43499) is a Linux kernel vulnerability found by Nebu that exists in every major distribution since 2011. Triggering the bug does not require any special kernel config or privilege. By turning it into a 97% stable privilege escalation and container escape, Google has rewarded us $92,337 in…
- Points
- 417
- HN comments
- 200
- Submissions
- 2
- Cited by
- 4 commenters
Security & PrivacySystems & Performance2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Jul 8, 2026 | GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years by ranger_danger | 417 | 194 |
| Jul 10, 2026 | GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years by djfergus | 104 | 6 |
Cited in comments
Linked from 4 Hacker News comments by 4 different people, from Jul 2026 to Jul 2026.
Most recent:
- rvz · Jul 13, 2026
- IIsi50MHz · Jul 12, 2026
- ranger_danger · Jul 8, 2026
- etenal · Jul 8, 2026
