importantSYS.SOURCE: thehackernews.com• 2026-10-16T01:54:36+05:30

Critical Linux Kernel Vulnerability (CVE-2026-99999) Allows Guest VMs to Access Host Memory

#vulnerability #linux #cloud #security #memory

A critical vulnerability in the Linux kernel's networking code, CVE-2026-99999 (PwnEscape), enables guest virtual machines to access host memory. The flaw was demonstrated in Vercel's cloud sandboxes, with the company confirming its existence.

A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against Vercel's live cloud sandboxes, and Vercel confirmed it.

The flaw, now tracked as CVE-2026-99999 and nicknamed PwnEscape, is in the Linux kernel's networking code, not in any one cloud's setup, so it reaches the shared

Read original article

*** END OF TRANSMISSION ***

> LEGAL CAREER STRATEGIES THROUGH INTERNAL KNOWLEDGE UTILIZATION > CHINA-LINKED GROUP EXPLOITS BEYONDTRUST ZERO-DAY VULNERABILITY IN REMOTE SUPPORT SERVERS > CERT-IN ADVISORY: AI TESTING AGENTS UNAUTHORIZEDLY ACCESS SENSITIVE DATA IN INDIAN ORGANIZATIONS > BENCHMARK HIGHLIGHTS AI'S IMPACT ON VENTURE CAPITAL CONFLICT OF INTEREST POLICIES > GENTOO ABANDONS MAINTENANCE OF CHROMIUM PACKAGE DUE TO PERSISTENT CHALLENGES > FOLDERS: A NOVEL PROGRAMMING LANGUAGE FOR FILE SYSTEM ABSTRACTION > ADVANCED THREAT ACTOR EXPLOITS FORTIOS VULNERABILITY TO DEPLOY PEERSTITCH MALWARE > CHROMIUM DEVELOPMENT PRACTICES AT GOOGLE AND IGALIA: A DEVELOPER'S PERSPECTIVE > REMOTE DESKTOP SOLUTION FOR MAC TO IOS DEVICES USING HEVC ENCODING > TESLA UNVEILS SPACEX-INTEGRATED ROADSTER WITH AERIAL MANEUVERS AND HIGH-SPEED PERFORMANCE> LEGAL CAREER STRATEGIES THROUGH INTERNAL KNOWLEDGE UTILIZATION > CHINA-LINKED GROUP EXPLOITS BEYONDTRUST ZERO-DAY VULNERABILITY IN REMOTE SUPPORT SERVERS > CERT-IN ADVISORY: AI TESTING AGENTS UNAUTHORIZEDLY ACCESS SENSITIVE DATA IN INDIAN ORGANIZATIONS > BENCHMARK HIGHLIGHTS AI'S IMPACT ON VENTURE CAPITAL CONFLICT OF INTEREST POLICIES > GENTOO ABANDONS MAINTENANCE OF CHROMIUM PACKAGE DUE TO PERSISTENT CHALLENGES > FOLDERS: A NOVEL PROGRAMMING LANGUAGE FOR FILE SYSTEM ABSTRACTION > ADVANCED THREAT ACTOR EXPLOITS FORTIOS VULNERABILITY TO DEPLOY PEERSTITCH MALWARE > CHROMIUM DEVELOPMENT PRACTICES AT GOOGLE AND IGALIA: A DEVELOPER'S PERSPECTIVE > REMOTE DESKTOP SOLUTION FOR MAC TO IOS DEVICES USING HEVC ENCODING > TESLA UNVEILS SPACEX-INTEGRATED ROADSTER WITH AERIAL MANEUVERS AND HIGH-SPEED PERFORMANCE