{
  "id": 15548287,
  "title": "Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking",
  "url": "https://urgent.news/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-15548287",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-19T00:33:00.000Z",
  "source": {
    "name": "The Register",
    "slug": "the-register",
    "url": "https://www.theregister.com/virtualization/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-attack-penguin-powered-networking/5303744"
  },
  "original_language": "en",
  "account": "A critical vulnerability, dubbed PwnEscape, has been discovered in Linux KVM, a hypervisor widely used in most hyperscale clouds. The flaw, named by researcher Paulos Yibelo, could allow a guest-host escape, representing a new way to attack Linux systems. The issue is rated critical, as it enables guests to access the host server by sending malformed IPv4 packets. This threat arises due to Linux's optimization of network packet checksum operations, which allows less-trusted guest-controlled metadata to influence validation stages. The security breach could potentially lead to arbitrary code execution on the host, a Denial of Service, or information disclosure of sensitive memory. While major cloud providers like AWS and Google Cloud claim to be unaffected, the discovery highlights a new class of threats to Linux networking, demanding urgent attention from developers and users alike.",
  "summary": "Party like it’s CVE-2026-99999 – a 9.3-rated nasty called PwnEscape",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 3,
    "also_reported_by": [
      {
        "outlet": "XDA Developers",
        "title": "I keep trying to escape Fedora, but it's the perfect Linux distro for me",
        "url": "https://urgent.news/2026/10/19/i-keep-trying-to-escape-fedora-but-its-the-perfect-linux-distro-for-me",
        "published": "2026-10-19T00:00:19.000Z"
      },
      {
        "outlet": "The Register Science",
        "title": "Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking",
        "url": "https://urgent.news/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to",
        "published": "2026-10-19T00:33:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}