A use-after-free vulnerability in the Linux kernel's AF_UNIX socket subsystem can be exploited to escape a container and gain root privileges on the host, according to research by security firm DepthFirst released on September 22. The Ubuntu security dashboard indicates that the Linux package for Ubuntu 26.04 is "vulnerable, work in progress." This vulnerability affects 24.04, 22.04, and newer kernel packages for AWS, Azure, and GCP environments.

AF_UNIX sockets facilitate local communication between processes and are enabled by default in Docker and Kubernetes seccomp profiles, allowing the flaw to be exploited from within a container. If the collector runs during that window, it can free part of a group of linked sockets without removing a pointer from a persistent internal list.

Since the exploit leverages ordinary system calls that containers are permitted to make, it circumvents namespace isolation, cgroup limits, and seccomp filtering. DepthFirst suggests moving untrusted workloads to microVM isolation, like Firecracker or Kata Containers, which create each workload with its own kernel rather than sharing the host's. Both discoveries were aided by AI research.

DepthFirst asserts that AI-driven vulnerability discovery has significantly lowered the barrier for container escapes, prompting organizations to no longer consider containers as a secure boundary. Nearly 5,700 Linux kernel vulnerabilities were disclosed in 2026, marking the highest annual total ever reported, according to LinuxCVETracker.