Overview
Nebula Security is a security research firm whose VEGA automated analysis tool discovered ghostlock (CVE-2026-43499), a 15-year-old Linux kernel rtmutex vulnerability.
Recent Developments
- 2026-07-07: Published GhostLock technical write-up (IonStack Part II); demonstrated 97% stable local privilege escalation and container escape; earned $92,337 Google kernelCTF bounty (2026-07-11-ghostlock-nebula-primary-research)