🟠High: Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
-
A use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem can be exploited to escape a container and obtain root privileges on the host system, according to research published by DepthFirst on September 22.
The flaw is tracked as CVE-2026-80521 with a CVSS score of 7.8. While it was fixed upstream on August 6, Ubuntu has not yet shipped the patch for its 26.04, 24.04, or 22.04 LTS releases, leaving those systems exposed.
Affected releases still awaiting the patch:
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
Administrators running containerized workloads on these Ubuntu versions should treat this as a priority, since a successful exploit allows an attacker to break out of the container boundary and gain root on the underlying host. Until Ubuntu publishes the fix, mitigation options are limited to applying upstream kernel patches manually or restricting access to untrusted container workloads.
Source: The Hacker News
Has anyone confirmed whether the upstream patch applies cleanly to the affected Ubuntu LTS kernels, or are you waiting on Canonical's backport?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login