Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking
Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape
A critical guest-host escape flaw in Linux KVM, the hypervisor widely used in hyperscale clouds, has been discovered by researcher Paulos Yibelo. Dubbed PwnEscape, the vulnerability could allow a guest workload to access the host machine, potentially resulting in arbitrary code execution, Denial of Service, or information disclosure of sensitive memory.
According to Red Hat, the impact could include a failure of the guest-host isolation boundary, which is critical as public and private clouds rely on that separation. The flaw, CVE-2026-99999, is triggered by malformed IPv4 packets and exploits the way Linux handles network packet checksum metadata. This issue highlights the need for secure virtualization and the potential risks of untrusted metadata influencing kernel validation and packet handling.
Written by urgent.news from The Register Science's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
