Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
MentionsLinux kernel
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared
Summary from The Hacker News.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.