Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
Linux kernel vulnerability PwnEscape allows guest VMs to read host memory.
Run Vercel?
Get an email when a reviewed story names Vercel, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
A critical vulnerability, dubbed PwnEscape and tracked as CVE-2026-99999, has been discovered in the Linux kernel's networking code. This flaw enables code running within a virtual machine to access and read memory from the host system. A researcher successfully demonstrated this memory leak against Vercel's cloud sandboxes, a risk that Vercel has acknowledged.
The lesson from this incident
Full lessonCVE-2026-99999 (PwnEscape) exposes a critical flaw in the Linux kernel's networking code that breaks the fundamental security boundary between virtual machines and their host systems. A successful exploit allows malicious or compromised guest VM code to read arbitrary host memory, potentially exposing secrets, credentials, encryption keys, and data belonging to other tenants in a shared cloud environment. This is especially dangerous in multi-tenant cloud platforms like Vercel's sandboxes, where workload isolation is a core security promise. The vulnerability undermines hypervisor-level trust assumptions and demonstrates that kernel-level bugs can cascade into full environment escapes. Prompt patching and robust VM isolation architecture are essential to contain the blast radius of such flaws.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
Indicators of Compromise
- cve — CVE-2026-99999