Our takeLinux kernel CVE-2026-99999 (PwnEscape) lets guest VMs read host memory; it's confirmed and already demonstrated against live cloud infrastructure. Patch or update your kernel if you run VMs or host them.Security Resilience desk
Sources (18)
- hackernews · hackernews
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- auscert_bulletins · auscert_bulletins
- cert_bund · cert_bund
- cert_bund · cert_bund
- cert_bund · cert_bund
- cert_bund · cert_bund
- cert_bund · cert_bund
- cert_bund · cert_bund
- cert_bund · cert_bund
What this means for you — Security leader:Patch Linux kernel hosts (especially those running KVM or cloud workloads) on your normal cycle; the PwnEscape flaw lets guest VMs read arbitrary host memory.
What this means for you — Lean IT orgs:If you run any Linux servers or VMs in the cloud, check with your provider for the PwnEscape kernel update and apply it when available.
What this means for you — MSP:Audit client Linux hosts and cloud VMs for exposure to CVE-2026-99999; prioritize patching kernel hosts running KVM or similar hypervisors.
What this means for you — Researcher:PwnEscape demonstrates a kernel networking flaw that lets guest VMs read host memory; test your own sandboxes and kernel configs.