Researcher finds it, kernel devs write an upstream fix, distros pick it up.
PwnEscape (CVE-2026-99999) is a KVM guest-to-host escape, and the open source loop is already running on it.
Worth a read: https://www.theregister.com/virtualization/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-attack-penguin-powered-networking/5303744
AlmaLinux
npub1ax…3lujq
2026-10-22 21:44:01 UTC
Author Public Key
npub1ax5chf02hudke2wumsdjujenxtpsxjg94qgqtk5zldezkw4xpt0sx3lujqSeen on
wss://relay.momostr.pinkPublished at
2026-10-22 21:44:01 UTCEvent JSON
{
"id": "697a2c25b08a971bceed3651b14c5cecae99b4b0658b76c76fe1ac381525d406",
"pubkey": "e9a98ba5eabf1b6ca9dcdc1b2e4b3332c3034905a81005da82fb722b3aa60adf",
"created_at": 1792705441,
"kind": 1,
"tags": [
[
"proxy",
"https://fosstodon.org/@almalinux/117486743790373205",
"web"
],
[
"proxy",
"https://fosstodon.org/users/almalinux/statuses/117486743790373205",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://fosstodon.org/users/almalinux/statuses/117486743790373205",
"pink.momostr"
],
[
"-"
]
],
"content": "Researcher finds it, kernel devs write an upstream fix, distros pick it up. \n\nPwnEscape (CVE-2026-99999) is a KVM guest-to-host escape, and the open source loop is already running on it. \n\nWorth a read: https://www.theregister.com/virtualization/2026/10/19/linux-kvm-guest-host-escape-rated-critical-may-represent-a-new-way-to-attack-penguin-powered-networking/5303744",
"sig": "d2c2ebed19cf82507fe844692180c2a39685fede2357a1df288fd31194fcbb96b5a7947d652a2d45b6bdd995c3d1ae4fc2e912f9f4a0bdae5bb28822018fb335"
}