Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical flaw in the Linux kernel’s networking code (CVE-2026-99999, nicknamed PwnEscape) lets code inside a virtual machine read host memory, crash the host, or run code on it, The Hacker News reports. The flaw was found through a Vercel security challenge and demonstrated against Vercel’s live cloud sandboxes; there is no sign it has been used in a real attack.