A newly discovered Linux networking security vulnerability leaves virtual machines exposed to a full guest-to-host escape. CVE-2026-99999, or ‘PwnEscape’, lets anyone using a virtual server or container break out of their isolated environment and gain control of the host operating system or hypervisor. It’s a severe vulnerability affecting the Linux kernel that needs immediate patching.
Cloud Containers and managed servers being patched
We’re taking action and patching the Linux kernel on the Cloud Container platform and on all managed servers (Virtual Servers, Reserved Virtual Servers).
If you’re unmanaged, it’s your job to patch
If you’re running any unmanaged servers, it’s your responsibility to patch Linux. Considering the seriousness of this vulnerability, we suggest you act as quickly as possible.
If you’re running Ubuntu, check out their CVE-2026-99999 security page.
The Debian security tracker shows which Debian versions are fixed.
Every supported version of AlmaLinux (8,9, 10) contains the vulnerable code. See their PwnEscape vulnerability page for instructions.
Expect more of this
Earlier this year we said you should expect to see more critical vulnerabilities popping up than usual.
The flaw that PwnEscape exploits has been in the Linux kernel code since 2008. Every Linux kernel shipped since then has been—but it has only been uncovered now with the assistance of AI tools.
If you’re managing your own servers, you need to be prepared for a reality where CVEs like PwnEscape are discovered increasingly often. Urgent patching will only be required more frequently. To make things worse, malicious actors are armed with more powerful tools than ever before.
Server Management takes the pressure off
PwnEscape is yet another reminder of the value of Server Management when high severity vulnerabilities get uncovered. When we manage your Virtual Server, Reserved Virtual Server or Dedicated Server on your behalf, we keep you updated and covered for vulnerabilities just like this. We protect your servers so you don’t have to worry about bugs like PwnEscape at all.
Get in touch with us today to talk about Server Management, and you won’t have to worry about PwnEscape or any future vulnerability again.