CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-43499: GhostLock Linux Kernel Futex Flaw Provides Root Access

July 8, 2026

A Linux kernel futex vulnerability, dubbed GhostLock, is used as the second stage of the IonStack exploit chain to escalate privileges to root on Android. It is invoked directly from Firefox and is not patched by updating Firefox alone.