Researchers have disclosed a critical Linux kernel bug, dubbed PwnEscape and tracked as CVE-2026-99999, that lets a process inside a guest virtual machine pull memory contents from its underlying host. The flaw was first proven out against Vercel's production sandbox infrastructure, and the company has confirmed the finding. Because the bug lives in core kernel networking code rather than any single provider's setup, other cloud platforms running comparable virtualization could be exposed too.
// source: thehackernews.com ↗