Security1 hOctober 16, 2026, 03:24

Critical PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory

A critical Linux kernel vulnerability tracked as CVE-2026-99999 and nicknamed PwnEscape allows code inside a virtual machine to read memory on the host. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.

The Hacker News

Open source

Critical PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory

Vulnerability tracked as CVE-2026-99999, nicknamed PwnEscape
Guest VM code can read host machine memory
Leak demonstrated and confirmed on Vercel cloud sandboxes
Flaw is in Linux kernel networking code, not cloud setup

#Linux#Vercel

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Security

Researcher claims full KVM guest-to-host escape flaw

Software

FTL isolates containers like VMs with a userspace kernel

Security

Critical PwnEscape Linux Kernel Flaw Lets Guest VMs Read Host Memory

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Researcher claims full KVM guest-to-host escape flaw

FTL isolates containers like VMs with a userspace kernel

$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws