Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
AI-summarised brief · reviewed before publication
Researchers have disclosed a critical Linux kernel vulnerability, CVE‑2026‑99999, dubbed PwnEscape, that lets code running inside a virtual machine read, crash, or execute code on the host. The flaw resides in the kernel’s networking stack and was demonstrated against Vercel’s production sandboxes, where crafted network packets leaked about 32 bytes of host memory per packet and could destabilize the host with just two packets. The exploit requires code already executing in a guest VM, not remote internet access. Linux maintainers issued a patch that adds checksum validation to prevent header‑pointer misuse, and back‑ported it to stable branches. Vendors are urged to verify that their host kernels include the fix. Cloud providers using kernel layers should prioritize updating to mitigate cross‑tenant risk.
💡 Why It Matters
- · By breaking the isolation between guest VMs and their host, PwnEscape exposes a fundamental weakness in the shared kernel model that underpins most public clouds, forcing operators to reassess their security boundaries.
