15-year-old GhostLock Kernel Flaw Enables Privilege Escalation in Major Linux Distributions

A critical Linux kernel vulnerability, tracked as CVE-2026-43499 and dubbed “GhostLock,” has been disclosed by security researchers at VEGA, exposing a privilege escalation flaw that has silently affected major Linux distributions for over a decade. GhostLock originates from a logic error in the kernel’s real-time mutex (rtmutex) subsystem, introduced in Linux version 2.6.39 in 2011. […]

The post 15-year-old GhostLock Kernel Flaw Enables Privilege Escalation in Major Linux Distributions appeared first on Cyber Security News.