Linux kernel gets a fix for a flaw that enabled attackers to escape VMs

The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack , in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw allowed guest-controlled packet metadata to trigger a write that changes an IPv4 header after the kernel has already processed it. That flaw could be chained with additional exploitation techniques to achieve host-level code