A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even escape containers to compromise the underlying host. The flaw is a use-after-free bug in the kernel’s SCTP Dynamic Address Reconfiguration feature, and remarkably, its root cause traces back to code […]
The post 18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host appeared first on Cyber Security News.