Exploit released for unpatched Ubuntu kernel flaw enabling container escape

September 23, 2026 at 04:12 PM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

Security firm DepthFirst released exploit code on September 22 for CVE-2026-80521, a use-after-free in the Linux kernel's AF_UNIX socket subsystem that allows container escape and host root access. Ubuntu has not shipped a patch for its 26.04, 24.04, or 22.04 LTS releases, and its security tracker lists the package as vulnerable with work in progress. The flaw is not in CISA's Known Exploited Vulnerabilities catalog and has no confirmed attacks.

Key Facts

CVE-2026-80521 has a CVSS score of 7.8 and was fixed upstream on August 6 in mainline kernel 7.2 and stable branch 7.1.10.
Ubuntu's security tracker lists the Linux package on 26.04 as "vulnerable, work in progress," with no published date for the distribution update.
The vulnerable code was introduced in kernel 6.10 and backported to stable branches 6.1 and 6.6.
DepthFirst won a Google kernelCTF slot with the exploit on July 24 and reported the bug to the kernel security team on August 5.
The CVE commit credits kernel-exploitation researcher Kyle Zeng as the reporter.

Vulnerability Mechanics

The flaw sits in the kernel's garbage collector for AF_UNIX sockets, which cleans up file descriptors passed between processes through SCM_RIGHTS messages. AF_UNIX sockets handle local communication between processes and are allowed by default in Docker and Kubernetes seccomp profiles, making the flaw reachable from inside a container. A race condition in the garbage collector lets it see new references before the data carrying them has been queued. If the collector runs during that window, it can free part of a group of linked sockets without removing a pointer from a persistent internal list. The next collection pass follows that pointer into freed memory, triggering the use-after-free.

Exploit and Disclosure

DepthFirst released exploit code targeting Ubuntu 26.04 on September 22. The exploit reaches the kernel through ordinary system calls that containers are allowed to make, bypassing namespace isolation, cgroup limits, and seccomp filtering. DepthFirst said its AI model, dfs-large1, trained for vulnerability detection, found the flaw alongside a human-operated testing harness. The kernel maintainers replied that a researcher at OpenAI had independently reported the same bug, according to DepthFirst's timeline. The disclosure is the latest in a series of 2026 kernel flaws that allow attackers to escape containers.

Affected Systems and Mitigation

Ubuntu 24.04 and 22.04 releases are also affected through newer kernel packages, including those for AWS, Azure, and GCP workloads. No fix has shipped on any affected release, and neither DepthFirst nor Ubuntu has published a temporary workaround. DepthFirst recommends moving untrusted workloads to microVM isolation, such as Firecracker or Kata Containers, which give each workload its own kernel rather than sharing the host's.