15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched. The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

The article reports GhostLock (CVE-2026-43499), a 15-year-old use-after-free bug in the Linux kernel’s futex/rtmutex code that allows any logged-in user to escalate privileges to full root and escape containers on nearly all mainstream Linux distributions since 2011, with a published, highly reliable exploit and wide deployment across server and cloud environments.[1][3][6][10] This creates systemic risk for AI workloads and agents that run on affected Linux hosts or inside containers, since an attacker with any local foothold (including via compromised ML jobs, notebooks, or agent processes) can take over the host, bypass isolation, and tamper with models, data, and AI pipelines.[1][6] From a RealGround perspective, GhostLock is a critical infrastructure-level AI supply chain risk: AI systems inherit this kernel vulnerability from their underlying OS images, container bases, and cloud runtimes, so unpatched fleets undermine any application-layer AI security controls. Organizations should inventory AI-related Linux assets via SBOMs, confirm patched kernel versions rather than assuming coverage, prioritize shared and multi-tenant AI environments (Kubernetes clusters, CI runners,