[CLSTR]
API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

8 clusters · 13 sources · 39 days · First seen · Last updated

Linux kernel privilege escalation and KVM escape flaws

Overview

Multiple vulnerabilities in the Linux kernel continue to pose significant security risks, ranging from local privilege escalation to virtual machine escapes.

Local privilege escalation risks include ‘Copy Fail’ (CVE-2026-31431) and ‘DirtyFrag’, which involve page cache corruption bugs that allow attackers to manipulate system files or the in-memory view of setuid binaries. ‘DirtyFrag’ specifically extends these risks to the networking stack. Additionally, the ‘ZcopyReaper’ flaw (CVE-2026-43502) affects the Reliable Datagram Sockets subsystem due to a cleanup error in the zero-copy send path; researchers noted this issue has existed since Linux version 4.17.

A new critical vulnerability, dubbed ‘PwnEscape’ (CVE-2026-99999), has been disclosed with a CVSS score of 9.3. Discovered by researcher Paulos Yibelo using the AI model GPT-5.6 Sol, the flaw resides in the IPv4 network stack’s handling of checksum metadata. By sending packets with incorrect checksum information, a malicious guest in a virtual machine can exploit a delay in checksum calculation to cause memory corruption, allowing them to read host memory or execute arbitrary code on the host OS.

While the flaw is not a defect in KVM itself, it poses a major risk to virtualization and cloud environments. In response, Sakura Internet has suspended certain VPS applications to implement countermeasures, though AWS has stated its managed services are unaffected. While patches are available for Debian, Ubuntu, and RHEL, experts note that current fixes are primarily defense-in-depth measures, with more comprehensive input validation still under development.

Entities

Red Hat · Debian · KVM · Linux kernel · CISA

Timeline

  1. [TECHNOLOGY] 2 sources
    PwnEscape vulnerability discovered in Linux kernel network stack

    The PwnEscape vulnerability (CVE-2026-99999) in the Linux kernel allows VM guests to access host memory or execute code, discovered via AI-assisted research.

  2. [TECHNOLOGY] 3 sources
    Linux kernel vulnerability ‘PwnEscape’ allows virtual machine escape

    A critical Linux kernel vulnerability (CVE-2026-99999), known as ‘PwnEscape’, allows attackers to escape virtual machines to execute code on host systems. Cloud users are urged to patch immediately.

  3. [TECHNOLOGY] 2 sources
    Linux kernel and SiteGuard WAF face critical vulnerabilities

    Critical vulnerabilities have been reported in the Linux kernel (DirtyClone) and EG Secure Solutions’ SiteGuard Server Edition, both of which could allow attackers to gain unauthorized administrative privileges

  4. [TECHNOLOGY] 2 sources
    KVM vulnerabilities enable guest-to-host escapes

    Critical KVM zero-day vulnerabilities have been identified, including a full VM escape reported by Vercel and an ARM64 Linux kernel flaw (CVE-2026-89775) allowing guest-to-host root access.

  5. [TECHNOLOGY] 2 sources
    Linux kernel flaw allows root access and Docker container escape

    A 14-year-old Linux kernel flaw (CVE-2025-39964) in the AF_ALG interface allows local users to gain root access and escape Docker containers. CISA reports the bug is being exploited in the wild.

  6. [TECHNOLOGY] 2 sources
    Linux kernel receives critical security patches for eBPF and privilege escalation flaws

    Linux kernel security receives critical patches for eBPF memory access flaws and several privilege escalation vulnerabilities, alongside updates in gaming support and hardware.

  7. [TECHNOLOGY] 2 sources
    Linux kernel vulnerabilities face active exploitation and public exploits

    Linux kernel vulnerabilities are facing increased risk as CISA identifies three actively exploited flaws and a researcher releases public exploits for four local root privilege escalation bugs.

  8. [TECHNOLOGY] 2 sources
    Linux kernel vulnerabilities allow local privilege escalation

    New Linux kernel vulnerabilities, including the exploited ‘Copy Fail’ and the ‘ZcopyReaper’ RDS bug, allow local users to escalate privileges to root access.

Sources

blogspan.net · borncity.com · cybernoz.com · dev.to · flagthis.com · internet.watch.impress.co.jp · ithome.com · linux-magazin.de · linuxsecurity.com · publickey1.jp · scan.netsecurity.ne.jp · sourcetrail.com · starlabs.sg

This summary has been updated 5 times: see revision history