GhostLock: critical stack-UAF Linux vulnerability undetected for 15 years

Security researchers at Nebusec have discovered a critical stack use-after-free (UAF) vulnerability in the Linux kernel, dubbed GhostLock, which has been present in all Linux distributions for 15 years. The flaw could allow an attacker to gain control over an affected system. All major Linux distributions are affected and require an urgent security patch.

More on this topic

💻 Technology Furtex: a Linux post-exploitation, rootkit and evasion research toolkit Hacker News · 2d ago 💻 Technology Critical 7-Zip vulnerability patched — update to version 26.02 now PC Gamer · 3d ago 💻 Technology Zoom fixes critical Windows flaw that allowed remote account takeover TechRadar · 8d ago 💻 Technology Microsoft's Secure Boot Bypassed for 13 Years — Flaw Only Just Discovered Ars Technica · 9d ago 💻 Technology Single code edit could hijack Google Dialogflow CX AI agents, researchers found TechRadar · 11d ago 💻 Technology Unauthenticated remote code execution flaw found in Motorola MR2600 router Hacker News · 12d ago

More on this topic

💻 Technology Furtex: a Linux post-exploitation, rootkit and evasion research toolkit Hacker News · 2d ago 💻 Technology Critical 7-Zip vulnerability patched — update to version 26.02 now PC Gamer · 3d ago 💻 Technology Zoom fixes critical Windows flaw that allowed remote account takeover TechRadar · 8d ago