On October 15, 2026, Greg Kroah-Hartman pushed seven stable kernels that include a fix for CVE-2026-99999 — nicknamed PwnEscape in the research write-ups. LWN summarized the releases: 7.2.11, 6.18.57, 6.12.113, 6.6.159, 6.1.190, 5.15.223, and 5.10.272. If you run VMs or containers on shared hosts, this is a host-patch day, not a guest-only chore.
What broke
The bug sits in IPv4 checksum handling. Malformed CHECKSUM_PARTIAL metadata can make skb_checksum_help() write into the IPv4 header after the stack already trusted it — “corrupt the network header and cause a bunch of mischief,” in patch author Michael S. Tsirkin’s words on the LWN note. Researchers (Paulos / pwn.ai) showed the primitive can be chained toward guest-to-host impact over virtual networking (virtio_net / TUN/TAP style paths), not as an open-internet remote exploit.
That last distinction matters. Public write-ups treat this as local to a guest or container that can inject packets on a virtual NIC. Patching only the guest kernel does not harden the host. Update the host, reboot into the fixed build. Cloud sandboxes and multi-tenant virt stacks are the obvious blast radius.
What to do
If you run KVM, cloud sandboxes, or containers on shared hosts, treat host kernel updates as priority. The accepted upstream fix is commit 6785011f8b16 (ipv4: validate checksum_start before completing checksum), adding ip_check_csum_start() before checksum completion on the affected paths. No separate workaround is advertised if you cannot update yet — plan the reboot window.
I am not publishing exploit steps here. Read the LWN stable notice, the oss-security thread, and the pwn.ai technical post, then patch. Isolation boundaries only count when the host kernel is current. “We updated the guests” is not the same sentence as “the host is fixed.”
Ops checklist for my own boxes: confirm the running host kernel version after reboot, not just the package install log; watch vendor kernels and cloud node images for the same stable backports; and keep virt hosts off the “we’ll catch the next maintenance window” pile when a guest-to-host class bug lands.
Have a blessed day!