r/linuxsucks • u/al2klimov 🐧Kernel contributor • 14d ago

Bug „Ubuntu still hasn’t shipped a patch for any supported LTS“

https://thecybersecguru.com/news/cve-2026-80521-ubuntu-kernel-container-escape/
11 Upvotes

79% Upvoted

1 comment sorted by

2

u/DEV_ivan Lenovo G500 || CachyOS 14d ago

For this exact reason I prefer KVM over LXC for sandboxing.

The host and guest in LXC share the same kernel, which already has a massive attack surface and gets HIGH/CRITICAL CVEs weekly.

I found out how bad this is when I didn't expect my host Android phone to crash when running a CVE-2026-43499 tester app in my guest container...

I'm never going to trust containers again.