A Public Exploit Escapes Ubuntu Containers Before the Patch Ships
This story is from 2026-10-22. It is preserved in the archive; the latest stories are on the live feed.
TL;DR On September 22, 2026, security firm DepthFirst published a working container-escape exploit for CVE-2026-80521, a heap use-after-free in the Linux kernel's AF_UNIX socket subsystem, demonstrated against Ubuntu 26.04 LTS. The upstream kernel fix landed on August 6, 2026 — seven weeks earlier.…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-22 19:00 · DEV Community — AI
A Public Exploit Escapes Ubuntu Containers Before the Patch Ships