Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

Summary

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it. The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.