CVE-2026-43499

Nebula Security's AI platform VEGA uncovered GhostLock, a use-after-free vulnerability in the Linux kernel's futex implementation that has existed since version 2.6.39 (2011). The bug allows any unpri…

Nebula Security used its AI-driven bug-hunting tool VEGA to discover GhostLock (CVE-2026-43499), a 15-year-old use-after-free vulnerability in the Linux kernel that allows any logged-in user to gain r…

Nebula Security published exploit code for GhostLock, a 15-year-old Linux kernel vulnerability (CVE-2026-43499) that allows local privilege escalation and container escape. The flaw, introduced in Lin…