PwnEscape: Linux Kernel Flaw Lets VMs Read Host Memory

A critical Linux kernel flaw, named PwnEscape by the researcher who found it, allows code running inside a guest virtual machine to read memory on the host system. Confirmed. The researcher demonstrated the leak against Vercel’s live cloud infrastructure, per The Hacker News.

That is a hypervisor boundary violation. Guest VMs are isolated from host memory by design. PwnEscape breaks that isolation.

What is confirmed

• Affected component: Linux kernel
• Impact: guest VM process reads host system memory
• Severity: Critical (source-stated)
• Live demonstration: confirmed against Vercel’s production cloud environment
• Disclosure date: October 15, 2026

What is not yet confirmed

• CVE ID: not assigned at time of publication. Unconfirmed. Treat accordingly.
• Affected kernel versions: no range identified in available disclosure
• CVSS score: NVD assignment pending
• Patch: no upstream kernel security release confirmed at time of publication

Why it matters

Linux-based hypervisors underpin most commercial cloud infrastructure. When a guest process reaches host memory, the hypervisor trust boundary is compromised. Depending on the affected code path and kernel configuration, the practical exposure includes other tenants’ in-memory data, host credentials, and hypervisor internals.

The Vercel demonstration matters because Vercel runs a multi-tenant edge platform where customer workloads execute in isolated sandboxes. No statement from Vercel has been confirmed at time of publication.

Analysis: the vulnerability class is not Vercel-specific. Any organization running Linux-based virtualization at scale faces the same open question until affected kernel versions are named and patched.

This is the second major Linux kernel VM isolation disclosure in October. Earlier this month, an AI-assisted audit uncovered a Linux vhost flaw granting root and VM escape. In September, CISA added three previously exploited Linux kernel flaws to the KEV catalog. The pattern is accelerating.

A recent example of cross-cloud blast radius from a single code flaw: Next.js shipped an out-of-band patch this week for two critical RCEs, the second of which also affected Vercel-hosted applications.

Patch status

No patch confirmed at publication time. Monitor Linux kernel security releases and your distribution’s security advisory channel for a fix. CVE assignment from MITRE or the Linux kernel CNA is pending.

Source: The Hacker News, October 15, 2026.