18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath.

The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148, released August 3, close it. Anyone running an older kernel with SCTP reachable should update.

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

The Teaser Period: Why the AI Boom Is Hitting a Reset Wall

The Teaser Period: Why the AI Boom Is Hitting a Reset Wall Source: Hacker News

Read More

Al Vigier: Canada’s AI strategy shouldn’t include secret Palantir bills

Al Vigier: Canada’s AI strategy shouldn’t include secret Palantir bills Source: Hacker News

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 15.06.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 89 requests (recent log) 213.209.159.175 — 59 requests (recent log) 192.253.248.169 — 59 requests (recent

Read More