CERT2418-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Grant Root and Enable Container EscapeLoading data…
CERT24Threat Observatory
Period

18-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Grant Root and Enable Container Escape

A use-after-free flaw in Linux SCTP networking code can allow local users to gain root on a host when SCTP is reachable on the target. Tencent Zhuque Lab also reported a container-escape test, but it has not been reproduced outside the lab.

← Back to intelligence

18-Year-Old Linux SCTP Flaw CVE-2026-64564 Could Grant Root and Enable Container Escape

A use-after-free flaw in Linux SCTP networking code can allow local users to gain root on a host when SCTP is reachable on the target. Tencent Zhuque Lab also reported a container-escape test, but it has not been reproduced outside the lab.