{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T12:59:41.857Z",
  "stack": {
    "id": "linux",
    "label": "Linux",
    "kind": "platform",
    "url": "https://pwn.watch/s/linux",
    "feed": "https://pwn.watch/s/linux/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 1,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "pwnescape-cve-2026-99999",
      "title": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999",
      "json": "https://pwn.watch/i/pwnescape-cve-2026-99999.json",
      "status": "live",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Linux kernel networking (host side of KVM/Firecracker and similar)",
      "stacks": [
        "linux"
      ],
      "cveIds": [
        "CVE-2026-99999"
      ],
      "affectedVersions": [
        "Kernels before stable backports such as 5.10.272, 5.15.223, 6.1.190, 6.6.159, 6.12.113, 6.18.57, 7.2.11 (verify vendor packages)"
      ],
      "fixedVersions": [
        "Upstream commit 6785011f8b16 and matching stable backports; vendor kernels as listed by distros"
      ],
      "startedAt": "2026-10-08",
      "closedAt": null,
      "updatedAt": "2026-10-22T11:18:00+02:00",
      "summary": "Paulos Yibelo / pwn.ai found a Critical Linux networking flaw (CVE-2026-99999, CVSS 9.3) during Vercel’s $1M Sandbox challenge. Guest-controlled checksum metadata can rewrite an IPv4 header after validation, enabling host-memory disclosure and, in lab conditions, guest-to-host code execution on KVM/Firecracker. Upstream fix merged Oct 2026; host kernels need patch + reboot. Affects multi-tenant VPS / sandbox providers more than end-user desktops."
    },
    {
      "slug": "linux-kernel-cve-2025-39964",
      "title": "Linux Kernel: Linux Kernel Race Condition Vulnerability",
      "url": "https://pwn.watch/i/linux-kernel-cve-2025-39964",
      "json": "https://pwn.watch/i/linux-kernel-cve-2025-39964.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Linux Kernel",
      "stacks": [
        "linux"
      ],
      "cveIds": [
        "CVE-2025-39964",
        "CVE-2026-53266",
        "CVE-2025-39682"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-18",
      "closedAt": "2026-09-18",
      "updatedAt": "2026-09-18",
      "summary": "Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AF_ALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state. CISA added CVE-2025-39964, CVE-2026-53266, CVE-2025-39682 to the Known Exploited Vulnerabilities catalog on 2026-09-18 based on evidence of active exploitation."
    },
    {
      "slug": "linux-kernel-cve-2026-53362",
      "title": "Linux Kernel: Linux Kernel Unspecified Vulnerability",
      "url": "https://pwn.watch/i/linux-kernel-cve-2026-53362",
      "json": "https://pwn.watch/i/linux-kernel-cve-2026-53362.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Linux Kernel",
      "stacks": [
        "linux"
      ],
      "cveIds": [
        "CVE-2026-53362"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-08-27",
      "closedAt": "2026-08-27",
      "updatedAt": "2026-08-27",
      "summary": "Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking subsystem. This vulnerability can impact multiple products, including but not limited to Suse, Red Hat, and other products using Linux. Added to CISA KEV on 2026-08-27."
    },
    {
      "slug": "linux-kernel-cve-2026-31431",
      "title": "Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability",
      "url": "https://pwn.watch/i/linux-kernel-cve-2026-31431",
      "json": "https://pwn.watch/i/linux-kernel-cve-2026-31431.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Linux Kernel",
      "stacks": [
        "linux"
      ],
      "cveIds": [
        "CVE-2026-31431"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-05-01",
      "closedAt": "2026-05-01",
      "updatedAt": "2026-05-01",
      "summary": "Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation. Added to CISA KEV on 2026-05-01."
    }
  ],
  "changes": [
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-14/15",
      "title": "Mainline merge / public write-ups.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-07/08",
      "title": "Upstream IPv4 checksum guard accepted into net.git.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "linux-kernel-cve-2025-39964",
      "incidentTitle": "Linux Kernel: Linux Kernel Race Condition Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-18",
      "title": "CISA added CVE-2025-39964, CVE-2026-53266, CVE-2025-39682 to the KEV catalog (due 2026-09-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/linux-kernel-cve-2025-39964"
    },
    {
      "incident": "linux-kernel-cve-2026-53362",
      "incidentTitle": "Linux Kernel: Linux Kernel Unspecified Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-08-27",
      "title": "CISA added CVE-2026-53362 to the KEV catalog (due 2026-08-30).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/linux-kernel-cve-2026-53362"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-08-20",
      "title": "Initial host-memory disclosure reported.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "pwnescape-cve-2026-99999",
      "incidentTitle": "PwnEscape: Linux networking guest-to-host escape (CVE-2026-99999)",
      "severity": "critical",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-08-18",
      "title": "Vercel Sandbox challenge opens.",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/pwnescape-cve-2026-99999"
    },
    {
      "incident": "linux-kernel-cve-2026-31431",
      "incidentTitle": "Linux Kernel: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-05-01",
      "title": "CISA added CVE-2026-31431 to the KEV catalog (due 2026-05-15).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/linux-kernel-cve-2026-31431"
    }
  ]
}