Linux Kernel Vulnerability Allows Container Escape via AF_UNIX Socket
TL;DR. A newly detailed kernel vulnerability (CVE-2026-53361) enables unprivileged container escapes through a use-after-free flaw in AF_UNIX sockets. - The bug affects specific Linux kernel versions, including 6.12 and Ubuntu 6.17, allowing a dangling socket buffer. - An attacker can exploit a race condition during garbage collection and concurrent MSG_PEEK operations to achieve escape. - This vulnerability highlights persistent challenges in kernel security, having seen similar fixes in prior CVEs.
- CVE-2026-53361 is a use-after-free vulnerability in the AF_UNIX socket garbage collector.
- The flaw allows unprivileged container escape on vulnerable Linux kernels.
- The exploit leverages a race condition between garbage collection and MSG_PEEK operations.
- Several kernel versions, including 6.12 and Ubuntu 6.17, are identified as vulnerable.
- This is a recurrence of a bug pattern previously addressed in CVE-2021-0920 and CVE-2026-23394.