Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A researcher demonstrated the leak on Vercel's live cloud sandboxes, and Vercel confirmed it. The vulnerability, tracked as CVE-2026-99999 and nicknamed PwnEscape, resides in the Linux kernel's networking code.
Sources
Story so far
- Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory – The Hacker News
first report - Linux kernel gets a fix for a flaw that enabled attackers to escape VMs – CSO Online
patch / fix released
Fact-checked against the sources above before publishing. AI-assisted script, synthetic voice, human-approved. Found an error? Tell us.



