Critical Linux SCTP Flaw Enables Root Access and Container Escape

A memory-safety vulnerability hidden in the Linux kernel for almost two decades can allow a low-privileged user to take complete control of affected systems and, under certain conditions, escape from a container to compromise the underlying host.

Tracked as CVE-2026-64564 and named SCTPhantom, the vulnerability is a use-after-free flaw in Linux’s implementation of the Stream Control Transmission Protocol, or SCTP. The affected code handles dynamic changes to the network addresses associated with an SCTP connection.