{
  "id": 15546152,
  "title": "Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking",
  "url": "https://urgent.news/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-19T00:33:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/virtualization/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-attack-penguin-powered-networking/5303744"
  },
  "original_language": "en",
  "account": "A critical guest-host escape flaw in Linux KVM, the hypervisor widely used in hyperscale clouds, has been discovered by researcher Paulos Yibelo. Dubbed PwnEscape, the vulnerability could allow a guest workload to access the host machine, potentially resulting in arbitrary code execution, Denial of Service, or information disclosure of sensitive memory. According to Red Hat, the impact could include a failure of the guest-host isolation boundary, which is critical as public and private clouds rely on that separation. The flaw, CVE-2026-99999, is triggered by malformed IPv4 packets and exploits the way Linux handles network packet checksum metadata. This issue highlights the need for secure virtualization and the potential risks of untrusted metadata influencing kernel validation and packet handling.",
  "summary": "Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 3,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "I keep trying to escape Fedora, but it's the perfect Linux distro for me",
        "url": "https://urgent.news/2026/10/19/i-keep-trying-to-escape-fedora-but-its-the-perfect-linux-distro-for-me",
        "published": "2026-10-19T00:00:19.000Z"
      },
      {
        "outlet": "The Register",
        "title": "Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking",
        "url": "https://urgent.news/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-15548287",
        "published": "2026-10-19T00:33:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}