PwnEscape demo shows full KVM guest-to-host escape via Linux kernel flaw
moyix · x · 2026-10-16
pwn.ai unveiled PwnEscape, a full KVM guest-to-host escape chained from a Linux kernel networking flaw tracked as CVE-2026-99999. Starting from untrusted VM code, the exploit achieves host-kernel memory reads, controlled writes, and ultimately root command execution, affecting industry-standard hypervisors.
Related event: PwnEscape: Full KVM Guest-to-Host Escape Detailed(2 posts)→
More from Safety
- Anthropic red team's first-ever model "abliteration" cut GLM-5.3 refusals from 90% to 3% for ~$4,400 — cephaloform · 2026-10-16
- Anthropic grants METR employee-like access as independent safety evaluators go public — AnthropicAI · 2026-10-16
- APEX-Harm benchmark: script-based injection attacks easily compromise agents in shared workspaces — KAUST · 2026-10-16
- Residual-stream forecasts predict agent violations before they happen, USC study shows — USC · 2026-10-16
- AI safety drama: risk research called a 'company effort,' team lead responds — logangraham · 2026-10-16
- Brave's Leo adds end-to-end encrypted chat with GLM via attested TEE — gnukeith · 2026-10-16