10
GhostLock: 15-Year-Old Linux Kernel Flaw Gives Any Local User Root in 5 Seconds
(threat-intelligence.redeyesecurity.com)
this post was submitted on 08 Jul 2026
10 points (100.0% liked)
@linux on Linux.Community
796 readers
6 users here now
Rules
This is an on-topic community. All content must adhere to our CODE OF CONDUCT.
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Debian Bullseye is vulnerable, Bookworm has it fixed in the security updates (kernel 6.1.176-1), Trixie is safe for both, regular and security updates (kernel 6.12.86-1 and 6.12.95-1).
https://security-tracker.debian.org/tracker/CVE-2026-43499
That sucks, but not much (all "local account required" vulns are like that). I need to stay on 6.8 both for proper PM support for hibernation and because of the Nvidia drivers.