GhostLock: A 15-Year-Old Linux Kernel Vulnerability Found in All Distributions

GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years

I discovered GhostLock, a critical stack-use-after-free vulnerability hidden in the Linux kernel for over 15 years. This flaw affects every major distribution since 2011, allowing unprivileged attackers to escalate privileges and escape containers. By exploiting a logic error in the rtmutex rework, we turned this bug into a stable exploit, earning a $92,337 reward from Google.

"GhostLock was introduced in Linux 2.6.39 and fixed in Linux 7.1, existing in the Linux kernel for more than 15 years."