Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

AI Summary

Security firm DepthFirst published a working exploit for CVE-2026-80521 (CVSS 7.8), a use-after-free in the Linux kernel's AF_UNIX socket subsystem that enables container escape to host root. Although the upstream kernel patch was merged August 6, Ubuntu 26.04, 24.04, and 22.04 LTS have not yet shipped the fix. Container-based deployments on Ubuntu are directly exposed until distro patches are released.

Read full article → https://thehackernews.com/2026/09/exploit-released…

Relevance score: 83.0/100

# More from September 24

1
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers The Hacker News
2
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants The Hacker News
3
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks The Hacker News
4
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware The Hacker News
5
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises The Hacker News
6
MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key The Hacker News
8
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers BleepingComputer
9
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw BleepingComputer
10
Arista patches actively exploited VeloCloud Orchestrator zero-day BleepingComputer