Golem reports a Linux vulnerability it names PwnEscape that lets an attacker running inside a virtual machine break out to the host system.
Virtual machines are the primary isolation boundary of modern infrastructure: public clouds, CI/CD runners and hosted clusters all rely on the hypervisor keeping one tenant's workload away from another's. When that assumption fails, anything that can execute code in a compromised guest gains a path to the host — and with it to every other guest on the same machine.
For operators the immediate question is exposure: which kernel lines are affected, whether exploit code is in circulation, and which distributions have already shipped fixes. Golem's report carries the technical detail; people responsible for multi-tenant hosts should treat it as a prompt to check patch status now rather than at the next maintenance window.
VM escapes are rare compared with ordinary privilege-escalation bugs because they must cross two boundaries instead of one — guest to hypervisor, not merely user to root. That rarity is exactly what makes each new one notable.
