A flaw in the Linux kernel’s networking code can allow software inside a virtual machine to read memory from the physical server, or host, that runs it. Tracked as CVE-2026-99999 and nicknamed PwnEscape, it was found during Vercel’s $1 million sandbox challenge and demonstrated against Vercel’s production sandboxes. Fixed kernels for all seven maintained stable and … Continue reading Linux Kernel Flaw PwnEscape Lets a Virtual Machine Read Its Host’s Memory. Upstream Fixes Are Out.