security_identifier

CVE-2026-80521

Identifier for a use-after-free vulnerability in the Linux kernel's AF_UNIX socket garbage collector, scored CVSS 7.8.

Current clusters

DepthFirst's AF_UNIX exploit takes host root out of a default-configured Ubuntu container

The kernel fixed CVE-2026-80521 on August 6. Ubuntu has shipped nothing for 22.04, 24.04 or 26.04, including its AWS, Azure and GCP kernels, and DepthFirst's exploit for 26.04 went public on September 22.

Publishers:thehackernews.com

Reality

Evidence58
Adoption30
Hype gap+20
Incentives70
Confidence60