> TritonInfoSec News
Home / Oct 17, 2026 / Story
0
#4 The Hacker News general October 15, 2026 at 20:24 UTC

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

By [email protected] (The Hacker News)

AI Summary

A critical Linux kernel vulnerability dubbed PwnEscape (CVE-2026-99999) allows code executing inside a guest virtual machine to read host memory, with a researcher demonstrating the leak against Vercel's live cloud sandboxes — confirmed by Vercel. The flaw resides in the Linux kernel's networking code rather than any cloud-specific configuration, meaning it affects any multi-tenant Linux-based cloud environment. Cloud providers and organizations running shared Linux VM infrastructure should assess patch availability and apply mitigations immediately.

Read full article → https://thehackernews.com/2026/10/critical-pwnesca…

Relevance score: 85.0/100

# More from October 17

  1. 1
    China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers The Hacker News
  2. 2
    Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor The Hacker News
  3. 3
    Targeted ads delivered 0-click exploits to install mercenary malware Ars Technica Security
  4. 5
    OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks SecurityWeek
  5. 6
    Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis SecurityWeek
  6. 7
    BAE Systems cyberattack disrupts US federal court operations BleepingComputer
  7. 8
    PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions The Hacker News
  8. 9
    GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories The Hacker News
  9. 10
    Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers BleepingComputer