Ubuntu LTS releases await fix for container-to-host root flaw

DepthFirst has released exploit code for CVE-2026-80521, a Linux kernel vulnerability that can let an attacker escape a container and obtain root privileges on its host. The flaw carries a CVSS score of 7.8 and affects Ubuntu 26.04, 24.04 and 22.04 LTS releases through newer kernel packages, including kernels used for AWS, Azure and GCP workloads.

Ubuntu had not shipped a fix for any affected release at the time of publication. Its security tracker listed the Linux package for Ubuntu 26.04 as vulnerable and work in progress, without a published delivery date. DepthFirst's public exploit targets Ubuntu 26.04.

AF_UNIX socket race reaches the host kernel

The issue is a use-after-free in the Linux kernel garbage collector for AF_UNIX sockets. That collector handles file descriptors passed between local processes in SCM_RIGHTS messages. AF_UNIX sockets are available by default under Docker and Kubernetes seccomp profiles, making the vulnerable path reachable from inside a container.

A race condition allows the collector to observe new references before the data carrying them is queued. If collection occurs in that interval, it can free part of a linked socket group while leaving a pointer in a persistent internal list. A later collection pass can follow that stale pointer into freed memory.

DepthFirst said the exploit invokes ordinary system calls that containers are normally permitted to use. It can therefore bypass namespace isolation, cgroup limits and seccomp filtering. There are no confirmed reports of exploitation, and CVE-2026-80521 is not listed in CISA's Known Exploited Vulnerabilities catalog.

Patch status and workload isolation

The upstream fix landed on August 6 in mainline kernel 7.2 and stable branch 7.1.10. The vulnerable code originated in kernel 6.10 and was also backported into stable 6.1 and 6.6 branches. Organizations operating affected kernels can apply the upstream patch directly, but neither Ubuntu nor DepthFirst published a temporary workaround.

The case follows a pattern of Linux kernel defects that can undermine the boundary between containers and their host. In Linux rootkits and router zero-day risks, Linux rootkits and a router zero-day illustrate the operational impact of kernel-level and infrastructure weaknesses when defensive layers fail. DepthFirst recommends placing untrusted workloads in microVM-based environments such as Firecracker or Kata Containers, where each workload receives its own kernel rather than sharing the host kernel.

AI-assisted discovery adds urgency

DepthFirst said its dfs-large1 model, trained for vulnerability detection, found the flaw with a human-operated testing harness. The company won a Google kernelCTF slot with its exploit on July 24 and reported the issue to the kernel security team on August 5. Kernel maintainers said an OpenAI researcher had independently reported the same bug, while the CVE commit credits Kyle Zeng as reporter.

DepthFirst linked the disclosure to other 2026 kernel flaws that enabled container escape or host-root escalation, including a July futex issue and an April cryptographic-subsystem flaw. LinuxCVETracker recorded nearly 5,700 Linux kernel CVEs in 2026. Businesses should inventory Ubuntu kernel versions across container hosts, prioritize patch deployment where available, and assess whether untrusted workloads require isolation beyond a shared-kernel container model.