st1nger 
🏴☠️ 
🏴☠️
@st1nger@infosec.exchange
Posting mostly about interesting #IT #Linux #Security #CTF #Infrastructure #HPC #SRE #DevOps #FOSS #OSHW #Science topics
infosec.exchange
A use-after-free bug in #Linux's #SCTP #networking #code can be turned into full #root on a host, and #Tencent researchers say they used it to escape a #container and reach the machine underneath.
The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6.12.101 and 6.6.148, released August 3, close it. Anyone running an older kernel with SCTP reachable should update.
https://thehackernews.com/2026/08/18-year-old-linux-sctp-flaw-could-let.html?m=1
