PwnEscape details published: 9.3 CVSS KVM guest-to-host escape via Linux networking bug
cramforce · x · 2026-10-16
Security researcher Paulos Yibelo has published the long-awaited details of PwnEscape, a full KVM guest-to-host escape tracked as CVE-2026-99999 with a critical 9.3 CVSS score.
- The flaw stems from a Linux kernel networking bug and affects multiple industry-standard hypervisors.
- The exploit chain goes from untrusted VM code to host-kernel memory reads, then controlled writes, and finally root command execution.
- The author says more technical detail will follow.
Related event: PwnEscape: Full KVM Guest-to-Host Escape Detailed(2 posts)→
More from Safety
- New paper uses revealed-preference methods to unpack why AI agents cooperate — brwilder · 2026-10-16
- Anthropic gives METR employee-level access, waives right to block its risk assessments — TechCrunch AI · 2026-10-16
- Berkeley scholars: concentrated chip supply chain makes a hardwired frontier AI pause feasible — wfithian · 2026-10-16
- Anthropic's GRAFT routes flagged gradients into a deletable adapter, cutting reward hacking to near zero — rohanpaul_ai · 2026-10-16
- Polymarket opens 50/50 market on more states banning Flock police cameras by end of 2026 — Polymarket · 2026-10-16
- Reproducing the Hugging Face security incident: a technical deep-dive, Part I — jessehu · 2026-10-16