Linux kernel vulnerability discovered

A critical vulnerability named PwnEscape, rated 9.3/10 in severity, has been discovered in the Linux kernel, affecting the isolation of virtual machines on KVM servers. The flaw, identified by researchers from pwn.ai and assigned the identifier CVE-2026-99999, allows an attacker with high privileges in a virtual machine to exploit its virtio-type virtual network interface to bypass protections that isolate it from the host server.

Exploitation mechanism explained

The vulnerability is not directly in KVM but in the way Linux processes certain network packets. When a virtual machine transmits data, it can delegate the calculation of their checksum to the host kernel, an operation intended to verify the integrity of the information exchanged. However, poor validation allows this operation to be diverted to modify part of the packet that Linux had already verified.

Impact demonstrated in lab tests

Researchers from pwn.ai demonstrated that they could retrieve information present in the host server's memory and execute code with administrator privileges on their laboratory machines. Their tests also caused a server to crash and the virtual machines it hosted. Vercel confirmed a memory leak from the host was demonstrated on its production infrastructure as part of its vulnerability research program. However, full control of the server was achieved on the researchers' laboratory machines.

No confirmed exploitation yet

No malicious exploitation on production infrastructures has been publicly established at this stage. Hosting providers are beginning to secure their servers. The disclosure of PwnEscape triggered a race for patches. The patch was integrated into the Linux network code on October 8, before being included in the main kernel on October 14. Debian already offers corrected versions, including kernels 6.1.190-1 for Bookworm and 6.12.113-1 for Trixie. At Ubuntu, several versions were still under evaluation at the time of the check.

Diverse approaches to mitigation

Hosting providers have not all chosen the same method. According to Heise, Netcup has begun restarting its virtualization servers to apply the fixes. Hetzner, on the other hand, has implemented a temporary protection based on eBPF, a technology that allows filtering certain behaviors directly within the system.

Responsibility lies with hosting providers

The correction of this flaw depends primarily on the hosting provider, as it is the host machines that must be protected, and the installation of a new kernel generally requires a reboot.

AI's role in vulnerability discovery

The discovery of PwnEscape also highlights the role of artificial intelligence in cybersecurity. Researchers explain having discovered the vulnerability in just three days, relying on an automated analysis system using GPT-5.6 Sol. The cost of queries to the model remained below 700 dollars. The AI did not work alone; the researchers guided the investigations, verified the hypotheses, and confirmed the results. However, this method allowed them to quickly explore a considerable volume of code. The fix, however, required several weeks of work and exchanges with the maintainers of the Linux kernel.

Understanding VM escape

A VM escape refers to an attack where an actor, from a virtual machine (VM), manages to exit its isolated environment to interact with the host system. On KVM, the Linux host controls the hardware and orchestrates several VMs; if the host is compromised, the separation between customers can collapse. The impact goes beyond the attacking VM: access to the host's memory, alteration of the server's configuration, and the possibility of reaching other co-hosted VMs. This is critical in multi-tenant cloud environments, as isolation is the basis of security and the economic model.

Virtio interface and its risks

Virtio is a paravirtualized interface that allows a VM to communicate effectively with the host for functions such as networking and storage, with less overhead than full hardware emulation. Concretely, the VM transmits packets to a host-side layer that processes them via the Linux network stack. If this stack or an associated step (validation, offload, memory copy) contains a bug, the VM can trigger an abnormal behavior on the host. Virtio becomes a privileged entry point because it is designed for rapid and frequent exchanges between guest and host.

Checksum offload and its vulnerabilities

Checksum offload involves letting the host (or hardware) calculate the checksum of a network packet instead of the sender, to gain performance. This mechanism relies on metadata describing which parts of the packet are covered by integrity checks. If the kernel validates a structure and then allows modification of fields that were supposed to be fixed, an inconsistency is created between what was verified and what is actually processed. In the worst case, this can cause out-of-bounds memory reads/writes: leakage of sensitive information in memory, crashes, or even execution of code with high privileges on the host.