KVM escape exposes broader attack surface in Linux networking

Source: CSO Online · OCT 20, 2026

Security researchers have found a critical flaw in the Linux kernel’s networking stack that can let attackers escape a KVM virtual machine and execute code on the host system. The weakness could also potentially let attackers compromise systems running other Linux-based virtualization and sandbox platforms. Tracked as CVE-2026-99999 and dubbed PwnEscape , the vulnerability was discovered by researchers from AI-powered pentesting startup Pwn.ai during a $1 million challenge to hack Vercel’s sandbox platform , which uses KVM-based Firecracker microVMs. Rather than exploiting a bug in the KVM hypervisor itself, the attack targets the Linux networking code that handles traffic from inside virtual machines. Specially crafted packets can alter an IPv4 header after the host’s kernel has already validated it, causing later processing to trust packet data that attackers have manipulated. The Pwn.ai researchers demonstrated host-memory leakage against Vercel’s production sandboxes and separately