18-YEAR-OLD LINUX KERNEL VULNERABILITY ENABLES ROOT ACCESS AND CONTAINER ESCAPE

Summary from the TLDR InfoSec newsletter

Tencent's Zhuque Lab disclosed SCTPhantom (CVE-2026-64564, CVSS 8.5), an 18-year-old use-after-free in Linux SCTP Dynamic Address Reconfiguration dating to kernel 2.6.25 that yields root via a repeatable exploit chain bypassing KASLR and can escape containers, patched in 6.6.148, 6.12.101, 6.18.42, and 7.1.6.