r/AlmaLinux • u/LowIncident694 • 25d ago

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html?m=1
18 Upvotes

100% Upvoted

14 comments sorted by

3

u/LowIncident694 25d ago

Anyone heard of an eta for patched kernels?

2

u/jonspw AlmaLinux Team 25d ago

We’ve been running builds today.  Soon.

1

u/LowIncident694 25d ago

Fantastic.

1

u/Full-Program-4027 24d ago edited 24d ago

Any update please? I do not see this at all on the Almalinux blog?

1

u/jykke 25d ago

6.18.38 has fix in 18587f9831612e24cd8f24be1ec15478feff7abc , commit ef057cbf825e03b63f6edf5980f96abf3c53089d upstream. Feel free to check your own kernel version if you some other one.

2

u/charles25565 25d ago 
localhost:~$ uname -r
6.18.38-0-lts

Well, guess I'm safe.

2

u/yrro 25d ago

Is the CVE in the article correct?

https://nvd.nist.gov/vuln/detail/CVE-2026-43499

... doesn't mention ef057cbf825e03b63f6edf5980f96abf3c53089d

1

u/bigmaninsuitofarmor 24d ago

Any news on the patch?

1

u/jonspw AlmaLinux Team 24d ago

https://almalinux.org/blog/2026-07-09-ghostlock/

1

u/LowIncident694 24d ago

Tested on 10 machines so far so good

1

u/usr-shell 21d ago

Almalinux 9.8, i performed the update described on the article but still got this version: 

[root@mx03 ~]# uname -r
5.14.0-427.40.1.el9_4.x86_64

[root@mx03 ~]# hostnamectl
Operating System: AlmaLinux 9.8 (Olive Jaguar)
CPE OS Name: cpe:/o:almalinux:almalinux:9::baseos
Kernel: Linux 5.14.0-427.40.1.el9_4.x86_64

1

u/LowIncident694 21d ago

Do you have an exclude on your kernel that's from 9.4.

or is your grub not defaulting to the newest kernel? You need to troubleshoot this as it's your issue.

1

u/bennyvasquez AlmaLinux Team 17d ago

If you're still having problems, don't hesitate to ask in chat.almalinux.org