Post #23755 144 Oct 16, 2026, 12:10 UTC PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)https://pwn.ai/blog/pwnescape@secharvester PWN.AI PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) How a $1 million sandbox challenge led pwn to a Linux CHECKSUM_PARTIAL trust-boundary bug: a post-validation IPv4 header mutation, a 32-byte host-memory disclosure, and an owned-host VM escape. 🔥 1