A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom, allows local attackers to escalate privileges to root and break out of containers by exploiting an 18-year-old flaw in SCTP’s Dynamic Address Reconfiguration (ASCONF) code. The bug, tracked as CVE-2026-64564, carries a CVSS v4.0 base score of 8.5 (High) and has been fixed upstream via kernel commit […]
The post SCTPhantom Linux Kernel Flaw Lets Local Attackers Gain Root and Escape Containers appeared first on Cyber Security News.