PWNAI researchers found a guest-to-host KVM escape via a vulnerability in the Linux networking stack, not KVM itself. An untrusted guest could inject checksum metadata that rewrites an IPv4 header after kernel validation, escalating from host-memory disclosure to full host compromise. The finding came from Vercel's $1M sandbox challenge and was described as the most important submission.
Background
KVM (Kernel-based Virtual Machine) is the dominant Linux virtualization platform. Guest-to-host escapes represent the highest severity category in virtualization security, allowing an attacker in a VM to compromise the underlying host system.
- Source
- Lobsters
- Published
- Oct 18, 2026 at 02:24 AM
- Score
- 8.0 / 10