{"id":4107,"date":"2026-10-16T13:52:05","date_gmt":"2026-10-16T10:52:05","guid":{"rendered":"https:\/\/upcloud.com\/global\/?p=4107"},"modified":"2026-10-16T20:27:22","modified_gmt":"2026-10-16T19:27:22","slug":"pwnescape-linux-kernel-vulnerability-upclouds-response","status":"publish","type":"post","link":"https:\/\/upcloud.com\/global\/blog\/pwnescape-linux-kernel-vulnerability-upclouds-response\/","title":{"rendered":"PwnEscape Linux kernel vulnerability: UpCloud\u2019s response"},"content":{"rendered":"\n<h1 class=\"wp-block-heading\">PwnEscape Linux kernel vulnerability: UpCloud\u2019s response<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Last updated: 7:27 PM UTC, October 16, 2026<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>About the vulnerability<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UpCloud is working to address and mitigate the recently disclosed PwnEscape vulnerability (<a href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-99999\" target=\"_blank\" rel=\"noopener\">CVE-2026-99999<\/a>) in the Linux kernel. The vulnerability concerns access to host memory from a guest virtual machine, with a full guest-to-host escape demonstrated in a controlled research environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our security and engineering teams have been closely monitoring the situation. We have not identified any evidence of active exploitation of this vulnerability on UpCloud systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Affected products<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability affects Cloud Server, Private Cloud and GPU Server products.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Mitigating actions<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have successfully identified the necessary mitigation for this vulnerability and are actively deploying these updates across our platform and infrastructure. While our response carries a slight potential for workload disruption, we do not expect any visible impact for the vast majority of our customers. No direct action is required from customers at this stage.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>GPU Servers:<\/strong> Due to their architecture, GPU servers cannot be live-migrated. These servers must be shut down and restarted to apply the upgrade, which will result in a longer downtime of approximately 30 to 60 minutes. We will communicate the relevant details directly to affected GPU customers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Private Clouds:<\/strong> We will communicate the relevant details directly to affected Private Cloud customers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you have questions or concerns, please contact our Support team.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PwnEscape Linux kernel vulnerability: UpCloud\u2019s response Last updated: 7:27 PM UTC, October 16, 2026 About the vulnerability UpCloud is working to address and mitigate the [&hellip;]<\/p>\n","protected":false},"author":15,"featured_media":88623,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"82929,80395,66650","_relevanssi_noindex_reason":"Blocked by a filter function","footnotes":""},"categories":[4,336],"tags":[],"class_list":["post-4107","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcements","category-security-compliance"],"acf":[],"_links":{"self":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/posts\/4107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/comments?post=4107"}],"version-history":[{"count":5,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/posts\/4107\/revisions"}],"predecessor-version":[{"id":9877,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/posts\/4107\/revisions\/9877"}],"wp:attachment":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/media?parent=4107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/categories?post=4107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/tags?post=4107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}