Linux vulnerability ‘PwnEscape’: keeping your servers patched

A newly discovered Linux networking security vulnerability lets a virtual machine break out of its isolated sandbox.

The vulnerability, known as CVE-2026-99999 or ‘PwnEscape’, is a severe vulnerability affecting the Linux kernel that needs immediate patching.

Using Web Hosting or Email Hosting? You're covered

If you're a Web Hosting or Email Hosting customer with MyHost, this isn't something you need to worry about.

We’re taking action by patching the Linux kernel on our Web Hosting and Email Hosting servers, as well as on all managed servers (Virtual Servers, Dedicated Servers).

We regularly patch our cPanel servers for all relevant reported vulnerabilities, so you can relax.

If you’re unmanaged, it’s your job to patch

If you’re running any unmanaged servers, it’s your responsibility to patch Linux. Considering the seriousness of this vulnerability, we suggest you act as quickly as possible.

• If you’re running Ubuntu, check out their CVE-2026-99999 security page.
• The Debian security tracker shows which Debian versions are fixed.
• Every supported version of AlmaLinux (8,9, 10) contains the vulnerable code. See their PwnEscape vulnerability page for instructions.

Expect more of this

Earlier this year we said you should expect to see more critical vulnerabilities popping up than usual.

The flaw that PwnEscape exploits has been in the Linux kernel code since 2008. Every Linux kernel shipped since then has been—but it has only been uncovered now with the assistance of AI tools.

If you’re managing your own servers, you need to be prepared for a reality where vulnerabilities like PwnEscape get discovered increasingly often. Urgent patching will only be required more frequently. To make things worse, malicious actors are armed with more powerful tools than ever before.

Managed Services takes the pressure off

PwnEscape is yet another reminder of the value of Managed Services when high severity vulnerabilities get uncovered. When we manage your Virtual Server, Reserved Virtual Server or Dedicated Server on your behalf, we keep you updated and covered for vulnerabilities just like this. We protect your servers so you don’t have to worry about bugs like PwnEscape at all.

Get in touch with us today to talk about adding Managed Services, and you won’t have to worry about PwnEscape or any future vulnerability again.