Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-10-15 20:24 UTC
Importiert: 2026-10-21 10:18 UTC
CVSS: 9.3
Quelle-ID: thn_global
uid_hash: ecad9f38898b62ba6926ddefb7369bd818213b02abd5b6b48919ef4677500473

The Hacker News

Inhalt

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.

The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-99999	CRITICAL	9.3	CRITICAL	9.3			2026-10-15

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste