GhostLock: 15-Year-Old Linux Bug Gives Users Root and Container Escape
GhostLock (CVE-2026-43499) is a use-after-free bug in the rt_mutex code that has shipped in every major Linux distribution since 2011. An unprivileged local user can trigger it to hijack kernel control, gain root, and escape container isolation. The flaw was patched in Linux 7.1; systems still on older kernels remain exposed.