[Discuss] PwnEscape

[kentborg at borg.org (Kent Borg)]

This morning I learn there is an impressive Linux KVM escape 
bug,?CVE-2026-99999 (fancy CVE number, too). A severity of 8.8 out of 
10. Earned a $50,000 prize for the discoverer.

https://pwn.ai/blog/pwnescape

I count on KVE for isolating things, am I vulnerable?

[search, run "uname -a", check my notes]

No. I updated my Debian machines to 6.12.113-1 and rebooted them on 
Friday afternoon. But as of right now, it seems there is no fix for Red Hat.

https://access.redhat.com/security/cve/cve-2026-99999#cve-mitigation

I thought they charged money to be a better product. I suppose they 
offer a lot more flavors and configurations, and that makes every change 
riskier.

-kb