[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foarSUJazatTtqtsW9X6fYXZ_kxVk_2FFr9txzH543e4":3},{"article":4,"iocs":34,"watch_terms":39,"solutions":40,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"d18591b3-9366-4c4f-b43c-998dd1052528","18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers","18-year-old-linux-sctp-flaw-could-let-local-users-gain-root-and-escape-container-897a98","A use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148, released August 3, close it. Anyone running an older kernel with SCTP reachable should update.","A critical use-after-free vulnerability in Linux's SCTP networking code, present since 2008, has been patched. Researchers from Tencent demonstrated that this flaw, tracked as CVE-2026-64564 and named SCTPhantom, can be exploited by local users to gain root privileges on a host system and even escape containerized environments. The vulnerability requires SCTP to be reachable on the target system, and fixes have been backported to several stable kernel versions.","An 18-year-old Linux SCTP flaw allows local users to gain root and escape containers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002F18-year-old-linux-sctp-flaw-could-let.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjmTGemKyDLZPr_sBbt2AdOQMEBEcRFzic8_Ddtkx92vtPOfFdoiwxJ60b00usecTjHuIGUJuUIR2aB8MU2P7-GLc0NOuWsa3ctofrA2-wD38wgI4Fke3moSskWjiRJEXT8Yxl7Ye56NgGl9DZKr8zf974rHRsc1PtHie_iIPVyD18HMx49S02tGZ2EeDY\u002Fs1600\u002Flinux-sctp.jpg","2026-08-07T11:10:33+00:00","2026-08-07T14:00:10.291201+00:00",9,[17,20,23],{"name":18,"type":19},"Tencent","vendor",{"name":21,"type":22},"Linux SCTP","technology",{"name":24,"type":25},"Linux kernel","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},[35],{"type":36,"value":37,"context":38},"cve","CVE-2026-64564","SCTPhantom vulnerability in Linux SCTP",[18,24],{"controls":41,"vendors":129},[42,71,100],{"slug":43,"name":44,"problem":45,"products":46},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":72,"name":73,"problem":74,"products":75},"patch-management","Automated patch management","Known holes get closed in days, not months.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":101,"name":102,"problem":103,"products":104},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[105,113,121],{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":147},"18-year-old-linux-sctp-flaw-enables-root-privilege-escalation-and-container-escape","18-Year-Old Linux SCTP Flaw Enables Root Privilege Escalation and Container Escape","A use-after-free vulnerability in the Linux kernel's SCTP networking subsystem went undetected for 18 years, illustrating how legacy code in widely-deployed systems can harbor critical flaws across an enormous attack surface. Exploiting this flaw allows local users to escalate privileges to root and break out of containerized environments, fundamentally undermining container isolation guarantees that many organizations rely on for workload security. The long lifespan of this vulnerability highlights the danger of assuming that mature, well-used code is inherently secure. Organizations running Linux-based systems or container workloads — which represents a vast portion of modern infrastructure — must treat kernel-level privilege escalation vulnerabilities as top-priority incidents requiring immediate patching.",[135,136,137,138,139,140,141,142,143,144,145,146],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 12: Network Infrastructure Management","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST CM-6: Configuration Settings","NIST AC-6: Least Privilege","NIST SI-4: System Monitoring","MITRE ATT&CK T1611: Escape to Host","MITRE ATT&CK T1068: Exploitation for Privilege Escalation","ITIL Change Management: Emergency Change Procedures","CIS Benchmark for Linux OS",{}]