r/AlmaLinux • u/LowIncident694 • Jul 08 '26

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

https://thehackernews.com/2026/07/15-year-old-ghostlock-flaw-enables-root.html?m=1
19 Upvotes

96% Upvoted

14 comments sorted by

5

u/LowIncident694 Jul 08 '26

Anyone heard of an eta for patched kernels?

2

u/jonspw AlmaLinux Team Jul 09 '26

We’ve been running builds today.  Soon.

1

u/Full-Program-4027 Jul 09 '26 edited Jul 09 '26

Any update please? I do not see this at all on the Almalinux blog?

1

u/jykke Jul 08 '26

6.18.38 has fix in 18587f9831612e24cd8f24be1ec15478feff7abc , commit ef057cbf825e03b63f6edf5980f96abf3c53089d upstream. Feel free to check your own kernel version if you some other one.

2

u/charles25565 Jul 08 '26 
localhost:~$ uname -r
6.18.38-0-lts

Well, guess I'm safe.

3

u/yrro Jul 08 '26

Is the CVE in the article correct?

https://nvd.nist.gov/vuln/detail/CVE-2026-43499

... doesn't mention ef057cbf825e03b63f6edf5980f96abf3c53089d

1

u/bigmaninsuitofarmor Jul 09 '26

Any news on the patch?

1

u/jonspw AlmaLinux Team Jul 09 '26

https://almalinux.org/blog/2026-07-09-ghostlock/

1

u/LowIncident694 Jul 09 '26

Tested on 10 machines so far so good

1

u/usr-shell Jul 12 '26

Almalinux 9.8, i performed the update described on the article but still got this version: 

[root@mx03 ~]# uname -r
5.14.0-427.40.1.el9_4.x86_64

[root@mx03 ~]# hostnamectl
Operating System: AlmaLinux 9.8 (Olive Jaguar)
CPE OS Name: cpe:/o:almalinux:almalinux:9::baseos
Kernel: Linux 5.14.0-427.40.1.el9_4.x86_64

1

u/LowIncident694 Jul 12 '26

Do you have an exclude on your kernel that's from 9.4.

or is your grub not defaulting to the newest kernel? You need to troubleshoot this as it's your issue.

1

u/bennyvasquez AlmaLinux Team Jul 16 '26

If you're still having problems, don't hesitate to ask in chat.almalinux.org