Is CVE-2026-99999 known to be exploited?

It is not marked known-exploited in this record.

CVE-2026-99999

Apply the latest Linux kernel update containing the fix for CVE-2026-99999. Monitor vendor advisories from Linux kernel maintainers and cloud providers. Until a patch is applied, restrict untrusted code execution within guest VMs and monitor for anomalous memory access patterns.

Quick answers

What is CVE-2026-99999?: Apply the latest Linux kernel update containing the fix for CVE-2026-99999. Monitor vendor advisories from Linux kernel maintainers and cloud providers. Until a patch is applied, restrict untrusted code execution within guest VMs and monitor for anomalous memory access patterns.
How severe is CVE-2026-99999?: critical
Is CVE-2026-99999 known to be exploited?: It is not marked known-exploited in this record.
How should CVE-2026-99999 be mitigated?: Apply the latest Linux kernel update containing the fix for CVE-2026-99999. Monitor vendor advisories from Linux kernel maintainers and cloud providers. Until a patch is applied, restrict untrusted code execution within guest VMs and monitor for anomalous memory access patterns.

CVSS

—

Vendor

Linux Foundation / Kernel Maintainers

Published

Oct 16, 2026 · 04:54

Patch

Unknown / not confirmed

Affected products

Linux Kernel

Mitigation

Critical Linux Kernel Vulnerability PwnEscape Allows VM-to-Host Memory Read

A critical privilege-escalation vulnerability in the Linux kernel's networking code, tracked as CVE-2026-99999 and nicknamed PwnEscape, permits code executing inside a guest virtual machine to read arbitrary memory on the host system. A researcher confirmed the flaw by demonstrating a read-from-host attack against Vercel's live cloud sandboxes, which Vercel has acknowledged. The issue stems from the kernel's networking subsystem and affects Linux-based virtual machines across diverse hypervisor environments.

11m

CVE-2026-99999

Quick answers

Related News

Critical Linux Kernel Vulnerability PwnEscape Allows VM-to-Host Memory Read