Linux kernel IPv6 flaw enables container escape via RPL

Linux kernel CVE-2026-43501 has been disclosed as a high-severity IPv6 flaw, judged CVSS 9.8 by the kernel CVE team. The vulnerability is described as an out-of-bounds write in the RPL (Routing Protocol for Low-Power and Lossy Networks) source routing header code. SecurityOnline[.]info’s Do Son reports that full technical details and a working exploit are now publicly available, and that researchers used the flaw to escape a container on Google’s Container-Optimised OS (COS) within the kernelCTF programme.

The post credits the public release to the referenced threat intelligence material, and centres on the RPL source-routing mechanism as the attack surface.

The coverage notes that the exploit and related details were disclosed on 26 October 2026, with testing grounded in container-escape scenarios observed in a COS environment. Do Son attributes the demonstration to researchers who verified the vulnerability’s real-world impact, including a proof-of-concept that facilitates container escape via IPv6 RPL processing.

The article does not provide further mitigation steps within the visible text, and because the content is premium and gated, this summary reflects the details explicitly stated in the accessible portion of the piece and the author’s attribution. Claims are attributed to the article’s author and the involved researchers and platforms as described in the post.