Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape
Exploit released for unpatched Ubuntu Linux kernel flaw enabling container escape.
A critical use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem allows attackers to escape containers and gain root access on the host. While fixed upstream, Ubuntu has not yet released patches for its 26.04, 24.04, and 22.04 LTS releases, leaving them vulnerable. Security firm DepthFirst has released exploit code and recommends using microVM isolation for untrusted workloads.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Ubuntu?
Get an email when a new story names Ubuntu, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem exposes Ubuntu LTS systems (22.04, 24.04, 26.04) to container escape attacks granting host-level root access. Despite an upstream kernel fix being available, Ubuntu has not yet shipped patches to its LTS distributions, creating a dangerous gap between fix availability and deployment. The public release of working exploit code by DepthFirst dramatically lowers the bar for attackers, turning a theoretical risk into an active threat. This incident highlights how the lag between upstream patches and downstream distribution releases can leave large enterprise Linux fleets critically exposed even when a fix technically exists.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- cve — CVE-2026-80521