Something’s off.A report says a Linux KVM virtual machine could potentially reach its host by sending malformed IPv4 packets. The reported flaw, dubbed PwnEscape and listed as CVE-2026-99999, is described as involving checksum metadata that can alter packet information after earlier checks have occurred.
That would undermine the separation virtualization is meant to provide: guest machines share a physical server but are supposed to remain unable to inspect or control the host. According to the report, the possible consequences include host code execution, a crash, or disclosure of sensitive memory. An upstream Linux kernel fix is reportedly making its way into major distributions.
UNVERIFIED
Feed metadata identifies a report, not independently verified underlying facts.
This is a source-attributed report whose underlying claims have not been independently verified.
