VEGA researchers have uncovered GhostLock (CVE-2026-43499), a severe Linux kernel vulnerability that has existed in all major distributions for 15 years. The stack-use-after-free flaw enables highly stable privilege escalation and container escapes without requiring special kernel configurations or privileges. Google awarded the team a $92,337 bug bounty for discovering and exploiting the flaw through its kernelCTF program.