CRITICALVulnerability
Global

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

·Source: The Hacker News

Updated:

Executive Summary

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

Analysis

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

Indicators of Compromise (1)

CVE (1)
CVE-2026-99999
NVDMITRE CVE
Source Attribution

Originally published by The Hacker News on Oct 15, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Quest Diagnostics Reports Hack on IT System Used by Clients

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/quest-diagnostics-reports-hack-on-system-used-by-clients-image_small-9-a-33185.jpg" align=right hspace=4><b>Medical Testing Lab Told SEC Incident Likely Compromised 'Certain Patient Records'</b><br>Medical testing company Quest Diagnostics has told the U.S. Securities and Exchange Commission that it's responding to a cyber inciden

Bank Info Security
MEDIUMVulnerabilityNEW

Alms For the Cyber Poor: Program Will Help Small Utilities

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/alms-for-cyber-poor-program-will-help-small-utilities-image_small-5-a-33186.jpg" align=right hspace=4><b>Dragos Has Learned That 'Free' Doesn't Always Mean 'Usable'</b><br>Dragos, a pioneer in the operational technology security market, and its new backer, consulting giant Accenture, are teaming up with the Sans Institute training

Bank Info Security
MEDIUMVulnerability

Railway warns devs to rotate secrets after potential breach

Cloud platform Railway published an urgent warning to users after detecting suspicious activity on its systems that store customer environment variables earlier this week. [...]

BleepingComputer