> TritonInfoSec News
Home / Aug 08, 2026 / Story
0
#2 The Hacker News general August 07, 2026 at 11:10 UTC

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers

By [email protected] (The Hacker News)

AI Summary

An 18-year-old use-after-free vulnerability in Linux's SCTP networking stack — present since 2008 — has been weaponized by Tencent researchers to achieve full root privilege escalation and container escape to the underlying host. Fixed in stable kernels 7.1.6, 6.18.42, 6.12.101, and 6.6.148 released August 3, 2026, any environment running older kernels with SCTP reachable is at active risk and should patch immediately.

Read full article → https://thehackernews.com/2026/08/18-year-old-linu…

Relevance score: 90.0/100

# More from August 08

  1. 1
    Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People The Hacker News
  2. 3
    Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability SecurityWeek
  3. 4
    New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP The Hacker News
  4. 5
    Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison SecurityWeek
  5. 6
    New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs The Hacker News
  6. 7
    Metabase SQLi zero-day exploited in customer data-theft attacks BleepingComputer
  7. 8
    Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets The Hacker News
  8. 9
    Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online CyberScoop
  9. 10
    New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts The Hacker News