PulseAugur
EN
LIVE 18:18:07

GhostLock vulnerability in Linux kernel allows privilege escalation for 15 years

By PulseAugur Editorial · [1 sources] ·

A critical vulnerability named GhostLock (CVE-2026-43499) has been discovered in the Linux kernel, affecting all major distributions for over 15 years. This flaw, introduced in version 2.6.39 and fixed in version 7.1, allows unprivileged local attackers to escalate privileges and escape containers with high stability. The vulnerability stems from a misuse of the `remove_waiter()` function, which incorrectly clears the `pi_blocked_on` flag on the wrong task during a proxy requeue operation, leading to a dangling kernel pointer. Google has awarded a $92,337 bounty for the discovery and successful exploitation of this bug. AI

RANK_REASON Discovery of a long-standing, critical vulnerability in a core operating system component. [lever_c_demoted from research: ic=1 ai=0.1]

Read on Hacker News — AI stories ≥50 points →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

GhostLock vulnerability in Linux kernel allows privilege escalation for 15 years

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Discovery of a long-standing, critical vulnerability in a core operating system component. [lever_c_demoted from research: ic=1 ai=0.1]
Source corroboration
Single-source cluster
Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics
other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Low
Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness
77 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

Full methodology in our editorial standards.

COVERAGE [1]

  1. Hacker News — AI stories ≥50 points TIER_1 English(EN) · djfergus ·

    GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

RELATED ENTITIES

RELATED TOPICS