vulnerability
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
HighCVSS 9.3
Summary
A critical vulnerability, CVE-2026-99999, in the Linux kernel allows code running inside a virtual machine to read memory on the host computer. While no real-world attacks have been reported, the vulnerability poses a risk to shared infrastructure due to how cloud providers separate customer workloads. The fix has been backported to stable kernel branches, but users should verify their host kernel is updated.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data