PwnEscape Linux Kernel Flaw Lets Guest VMs Leak Host Memory, Rated Critical
A critical flaw in the Linux kernel is forcing virtualization hosts to patch and reboot, after a researcher showed that code inside a guest virtual machine can read memory belonging to the host itself. Tracked as CVE-2026-99999 and nicknamed PwnEscape, the vulnerability is rated critical, with a CVSS score of 9.3. It breaks one of the basic promises of cloud and sandbox platforms: that an untrusted guest stays inside its own machine.