CVE-2026-43499 Ghostlock

[user18587]

Thanks for fixing the Bad Epoll CVE, do you know if this CVE-2026-43499 is present in current kernels?

https://www.securityweek.com/15-yea...-ghostlock-earns-researchers-92k-from-google/
https://nebusec.ai/research/ionstack-part-2/

"2026-04-20: The bug was fixed with another patch.
2026-05-04: The fix v1 was backported."

This one would require again a reboot as there's no workaround

 

[fabian]

7.0 and 6.8 already contained the fix, 6.17 with the fix is on pve-test at the moment:

- proxmox-kernel-6.8.12-31-pve
- proxmox-kernel-6.17.13-16-pve
- proxmox-kernel-7.0.6-2-pve

 

[TheMrg]

Is escape from unprivileged LXC container is possible? If yes, may mitigate with seccomp?

 

[CRCinAU]

7.0 and 6.8 already contained the fix, 6.17 with the fix is on pve-test at the moment:

- proxmox-kernel-6.8.12-31-pve
- proxmox-kernel-6.17.13-16-pve
- proxmox-kernel-7.0.6-2-pve

Thanks @fabian and the Proxmox team for these.

These problems have been coming so thick and fast that its getting harder and harder to just keep up with what's happening.

It's at the point now that if you have a server with an uptime of a week, it has several vulnerabilities.... Things are crazy right now, and I don't see any sign of getting a break from the onslaught any time soon either...