# 18-Year-Old Linux Kernel Bug Allows Full System Takeover **URL:** https://discuss.privacyguides.net/t/18-year-old-linux-kernel-bug-allows-full-system-takeover/39719 **Category:** News **Created:** 2026-08-07T23:37:59Z **Posts:** 10 ## Post 1 by @fria — 2026-08-07T23:37:59Z Researchers at Tencent Zhuque Lab [uncovered](https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564) an 18-year-old vulnerability in the Linux kernel that can escape containers and gain full root privileges on the host system. * * * This is a companion discussion topic for the original entry at [https://www.privacyguides.org/news/2026/08/07/18-year-old-linux-kernel-bug-allows-full-system-takeover/](https://www.privacyguides.org/news/2026/08/07/18-year-old-linux-kernel-bug-allows-full-system-takeover/) --- ## Post 2 by @NotVeryPrivateOnThisAccount — 2026-08-09T23:35:20Z Is Android/GrapheneOS vulnerable? --- ## Post 3 by @NotVeryPrivateOnThisAccount — 2026-08-10T00:08:00Z What about desktop distros that similarly (?) harden Linux, such as SecureBlue? > **[GrapheneOS isn't vulnerable to the 3 recent Linux memory logic vulnerabilities...](https://discuss.grapheneos.org/d/35353-grapheneos-isnt-vulnerable-to-the-3-recent-linux-memory-logic-vulnerabilities)** > > GrapheneOS discussion forum --- ## Post 4 by @fria — 2026-08-10T03:01:34Z > [@NotVeryPrivateOnThisAccount](#): > > Is Android/GrapheneOS vulnerable? > [@NotVeryPrivateOnThisAccount](#): > > What about desktop distros that similarly (?) harden Linux, such as SecureBlue? I’m not sure but it’s patched now so make sure you update to the latest version of your OS. --- ## Post 5 by @Julie — 2026-08-10T13:02:37Z I am not an expert in Linux. It is me or it’s a bad year for Linux, I mean could this be the start of the erosion of trust in it’s security ? What the reaction to adopt ? Especially since Apparmor and Selinux were not mitigatin techniques in some of the security breachs this year. Only use the lateste 7.x Kernels ? PS: I don’t consider Arch aur repo in my news review, I know it was know to be risky. --- ## Post 6 by @any1 — 2026-08-10T14:06:15Z > [@NotVeryPrivateOnThisAccount](#): > > SecureBlue > [@fria](#): > > I’m not sure but it’s patched now so make sure you update to the latest version of your OS. > > > * Move a bunch of socket classes from the "audit" list to the "deny" list. No te…sters reported any usage of these socket classes being flagged by the audit rules, and based on the descriptions of these socket classes, they're all very rarely used on modern systems (and in many cases are outright obsolete). > * Adjust socket auditing policy to no longer audit non-ioctl interaction with certain socket classes that have shown up frequently in the test data. > * Make CIL indentation style consistent. > > (There are more socket classes that we could consider denying access to; this is just to start with the low-hanging fruit.) They were ahead of the curve --- ## Post 7 by @sha123 — 2026-08-10T19:05:59Z > [@Julie](#): > > It is me or it’s a bad year for Linux, I mean could this be the start of the erosion of trust in it’s security ? It’s good that these security bugs get found by AI. Linux and researchers make heavy use of AI to detect these, also for new code. The next years will be hard, with many findings, until AI has maxed out all the patterns it can learn. In the long run it will lead to less bugs. We already had a similar situation when fuzzers became a thing. > [@Julie](#): > > Especially since Apparmor and Selinux were not mitigatin techniques in some of the security breachs this year. You can definitely restrict access to sockets via LSMs. Whether these exploits will work depends on the security context an attacker is in. --- ## Post 8 by @NotVeryPrivateOnThisAccount — 2026-08-10T23:46:05Z Which kernel versions are patched? I have been finding it very difficult for a layman such as myself to answer that question. --- ## Post 9 by @fria — 2026-08-10T23:51:35Z They have a table on their website that shows the fixed versions: > **[SCTPhantom: An 18-Year-Old SCTP ASCONF Transport Use-After-Free · Tencent...](https://matrix.tencent.com/en/2026/08/06/sctphantom-CVE-2026-64564#:~:text=4.2%20Fixed-,Versions,-The%20Linux%20kernel)** > > SCTPhantom is a Linux kernel use-after-free in SCTP's dynamic address reconfiguration code. --- ## Post 10 by @lyricism — 2026-08-11T01:48:41Z Most 18-year-olds can only dream of being capable of a full system takeover.