<![CDATA[🟠 High: Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape]]>A use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem can be exploited to escape a container and obtain root privileges on the host system, according to research published by DepthFirst on September 22.

The flaw is tracked as CVE-2026-80521 with a CVSS score of 7.8. While it was fixed upstream on August 6, Ubuntu has not yet shipped the patch for its 26.04, 24.04, or 22.04 LTS releases, leaving those systems exposed.

Affected releases still awaiting the patch:

  • Ubuntu 26.04 LTS
  • Ubuntu 24.04 LTS
  • Ubuntu 22.04 LTS

Administrators running containerized workloads on these Ubuntu versions should treat this as a priority, since a successful exploit allows an attacker to break out of the container boundary and gain root on the underlying host. Until Ubuntu publishes the fix, mitigation options are limited to applying upstream kernel patches manually or restricting access to untrusted container workloads.

Source: The Hacker News
Has anyone confirmed whether the upstream patch applies cleanly to the affected Ubuntu LTS kernels, or are you waiting on Canonical's backport?

]]>https://xploitlk.com/topic/488/high-exploit-released-for-unpatched-ubuntu-linux-flaw-enabling-host-root-container-escapeRSS for NodeTue, 27 Oct 2026 10:36:43 GMTSun, 27 Sep 2026 20:30:22 GMT60