Fire crews on scene of 'large' blaze at field in Essex
Fire crews on scene of 'large' blaze at field in Essex
Update on threat to Islamic event as Essex men arrested
Tom Cruise and Nicole Scherzinger headline World Cup final closing ceremony before Justin Bieber and Madonna's halftime show
'Kind, caring and beautiful boy' who died in fatal crash named as tributes paid
'Kind, caring and beautiful boy' who died in fatal crash named as tributes paid
TOWIE's Bobby Norris open to ending years-long Gemma Collins feud in fresh update
The heartbreaking story of the talented young woman murdered by her own family. Read it in The Crime Desk newsletter
If you want a lump-sum payout on your savings at the end of every month, I've found a great new option. It's a breath of fresh air: SYLVIA MORRIS
A not-so-Happy Meal! Turkey is famous for cheap holidays - but prices at this airport McDonald's are catching tourists out
Welsh Doxbin admin jailed for egging on swatters from behind a screen
Argentina's 'rigged' run to World Cup glory? 'One-sided' claims, 'fixed' turnarounds and Lionel Messi's let-off... every incident sparking the wild conspiracies which have England fans in fear
Lee Ryan could face jail for telling British Airways attendant he 'wanted her chocolate babies' in racially aggravated assault after losing bid to overturn conviction
AI Uncovers a 15-Year-Old Linux Kernel Root Vulnerability Hidden Since 2011
Artificial intelligence has helped uncover one of the most significant Linux kernel security flaws in recent years. Security researchers at Nebula Security announced the discovery of GhostLock (CVE-2026-43499), a critical local privilege escalation vulnerability that remained hidden in the Linux kernel for approximately 15 years before being identified by the company's AI-powered vulnerability research platform, VEGA.
The vulnerability affects Linux kernels dating back to version 2.6.39 (2011) and allows an unprivileged local user to obtain full root privileges on vulnerable systems. Its discovery not only highlights the importance of timely kernel updates but also demonstrates how AI is beginning to transform vulnerability research.
What Is GhostLock?GhostLock is a use-after-free (UAF) vulnerability located in the Linux kernel's futex (fast userspace mutex) implementation.
Futexes are synchronization primitives that allow user-space applications to efficiently coordinate access to shared resources while minimizing expensive kernel interactions. Because they are widely used throughout Linux, any flaw within this subsystem can have broad security implications.
According to Nebula Security, incorrect handling of the remove_waiter() function can leave behind a dangling kernel pointer that an attacker can manipulate to execute arbitrary code with kernel privileges.
A Reliable Path to Root AccessOne of the reasons GhostLock has attracted so much attention is the reported reliability of the exploit.
Researchers demonstrated that an attacker with nothing more than a standard local user account can escalate privileges to root in roughly five seconds, with a reported success rate of 97% on vulnerable systems.
Unlike many kernel exploits that are unstable or require highly specific system configurations, GhostLock appears to be both practical and repeatable, making it particularly concerning for administrators.
Container Escapes Are Also PossibleThe implications extend beyond traditional Linux desktops and servers.
Researchers report that GhostLock can also be used to escape containers and compromise the underlying host operating system. Because containers share the host kernel, a successful privilege escalation inside a container can potentially grant root access to the host itself.
This makes the vulnerability especially important for environments running:
Go to Full Article