2026-10-15 18:59 UTC
"PwnEscape" is the KVM escape for which rumors made the rounds a few days ago. Getting CVE-2026-99999 assigned is ๐จ๐ปโ๐ณ๐.
https://pwn.ai/blog/pwnescape
Kernel patch for this part (because it sounds like there's multiple):
https://github.com/torvalds/linux/commit/6785011f8b16abf40b1e9d8b2e332232b3e68822
Replies (2)
-
@janl@narrativ.es 2026-10-15 19:05
@jschauma@mstdn.social so not a $50k thing?
-
@kasperd@westergaard.social 2026-10-20 19:09
I am a little puzzled how something which appears to be a bug in the network stack is somehow specific to KVM.