// AI threat desk · 16 Oct 2026
Home/CVE · Vulns & Patches
Vulns & PatchesCriticalCVECVSS 9.3

Linux kernel networking flaw could enable guest-to-host attacks

pwn.ai disclosed PwnEscape after demonstrating selected host-kernel writes and a lab chain that executed a host-root helper. The Hacker News said maintainers rated it Critical at 9.3.

· 2 min read
AI-generated image of a researcher examining blurred kernel debugging screens beside a virtualization server.
AI-generated image, not a photo of the event.
Key takeaways
  • The Hacker News said PwnEscape is tracked as CVE-2026-99999, and Linux kernel maintainers rated it Critical at 9.3.
  • pwn.ai demonstrated selected 64-byte host-kernel writes and a lab chain that executed a host-root helper after four true-cold boots.
  • The accepted patch reached Linux’s mainline tree on Oct 14, 2026.

The flaw is in Linux kernel networking code rather than one cloud provider’s setup. The Hacker News said Linux kernel maintainers assigned CVE-2026-99999 a 9.3 rating, or Critical.

On this page

PwnEscape uses guest-sent packets to reach host memory

The Hacker News said the crash and code execution were observed only on the researcher’s own machines configured to match Vercel’s systems.

pwn.ai said its testing demonstrated selected 64-byte host-kernel writes. Four separate true-cold boots completed the bounded lab chain, which returned a host-generated marker to the guest.

The flaw was found during a Vercel sandbox challenge

The Hacker News said the flaw was found during a two-week Vercel challenge in August that offered up to $1 million in total rewards to participants who could break out of its sandbox.

Paulos Yibelo said pwn.ai’s research harness used GPT-5.6 Sol as its primary reasoning engine while researchers directed the investigation, challenged its findings and validated selected results against kernel behavior.

The accepted Linux patch was applied to net.git on Oct 8, 2026, and merged into Linus’s mainline tree on Oct 14, 2026.

The Hacker News said administrators should update the host kernel to a fixed version or vendor build and reboot into it. pwn.ai said it found the flaw in three days using an AI-assisted research system, with human researchers directing the work.

What to do now

  1. Update the host kernel to one of the fixed versions above, or to the vendor build that includes the fix, and reboot into it.

FAQ

What is PwnEscape?

The Hacker News described PwnEscape as CVE-2026-99999, a Linux kernel networking flaw that could let code inside a virtual machine read host memory, crash the host and run code on it.

Was PwnEscape exploited in production?

The Hacker News said the crash and code execution were observed only on the researcher’s own machines configured to match Vercel’s systems.

How do I fix PwnEscape?

The Hacker News said administrators should update the host kernel to a fixed version or vendor build that includes the fix, then reboot into it.

How was PwnEscape discovered?

pwn.ai said it found the flaw in three days using an AI-assisted research system, with humans directing the work. Paulos Yibelo said GPT-5.6 Sol was the primary reasoning engine in the research harness.

Sources

  1. PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999), pwn.aiPrimary
  2. Findings from the $1M Vercel Sandbox challenge, VercelPrimary
  3. Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory, The Hacker News
How we checked this story
ClaimSourceStatus
The Hacker News said a newly disclosed critical Linux kernel flaw allows code inside a virtual machine to read memory on the host computer it runs on.The Hacker NewsAttributed
The Hacker News said the flaw is in the Linux kernel’s networking code rather than one cloud provider’s setup.The Hacker NewsAttributed
The Hacker News said paulos Yibelo found that specially made packets sent from inside a virtual machine could read host memory, crash the host, and run code on it.The Hacker NewsAttributed
The Hacker News said the crash and code execution were observed only on the researcher’s own machines configured to match Vercel’s systems.The Hacker NewsAttributed
The Hacker News said the flaw was found during a two-week Vercel challenge in August offering up to $1 million in total rewards.The Hacker NewsAttributed
The Hacker News said the Linux kernel maintainers rated CVE-2026-99999 9.3 out of 10, or Critical.The Hacker NewsAttributed
pwn.ai said it discovered the flaw in three days using an AI-assisted research system, with humans directing the work.pwn.ai, via The Hacker NewsAttributed
Paulos Yibelo said pwn.ai said its research harness used GPT-5.6 Sol as the primary reasoning engine while researchers validated findings against kernel behavior.Paulos Yibelo, via The Hacker NewsAttributed
pwn.ai demonstrated selected 64-byte host-kernel writes and a bounded lab chain that executed a host-root helper after four true-cold boots.pwn.aiConfirmed
The accepted Linux patch was applied to net.git on 8 October 2026 and later merged into Linus’s mainline tree on 14 October 2026.pwn.aiConfirmed
Vercel said no reports showed anyone reading customer files, secrets, or application data.VercelAttributed
vercel.com published its report on Oct 14, 2026.vercel.comConfirmed

Could not verify

  • Whether CVE-2026-99999 was exploited in real-world attacks is not established.
  • How many systems or cloud providers were affected is not established.
  • Whether the demonstrated host-root chain works in any vendor’s production environment is not established.
cve
See all in Vulns & Patches →
Explore with AI
ChatGPT
Claude
Perplexity
Grok