18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath.

The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148, released August 3, close it. Anyone running an older kernel with SCTP reachable should update.

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six

Read More

Attack Update: Top 5 Attack-IPs auf doode.info – 23.08.2026

Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 743 requests (recent log) 34.26.148.248 — 500 requests (recent log) 35.196.194.152 — 220 requests (recent

Read More

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware

Read More