Exploit Released for Unpatched Ubuntu Linux Flaw Enabling HostRoot Container Escape

A useafterfree in the Linux kernels AFUNIX socket subsystem can be used to escape a container and gain root on the host security firm DepthFirst said in research published September 22 The flaw tracked as CVE202680521 CVSS score 78 was fixed upstream on August 6 but Ubuntu has not shipped the patch for its 2604 2404 or 2204 LTS releases DepthFirst