Vulnerabilities
PwnEscape (CVE-2026-99999): Critical Linux Kernel Flaw Enabled KVM Guest-to-Host Escapes, Now Fixed
The PwnEscape flaw (CVE-2026-99999, CVSS 9.3) lets crafted guest packets corrupt host kernel memory via the IPv4 checksum path. Patched host kernels are shipping, and exploitation has so far only been shown in research settings.