Black & White Path

Jul 11, 2026 · Information Security

GhostLock: 15‑Year‑Old Stack UAF Vulnerability in All Linux Distributions (CVE‑2026‑43499)

GhostLock (CVE‑2026‑43499) is a stack‑use‑after‑free bug that has existed in every major Linux distribution for over 15 years, can be triggered without special kernel configuration, and enables a high‑reliability privilege‑escalation and container‑escape chain that the authors detail step‑by‑step, including mitigation patches and a timeline of disclosure.