PwnEscape vulnerability: Safety first, we’re patching our systems

The vulnerability does not lie in the hypervisor itself, but in the Linux kernel’s network stack. Using specialised network packets, a guest system can manipulate checksum metadata in such a way that, in the subsequent process, it reads data from the host’s memory. The researchers who discovered PwnEscape demonstrated a complete escape from the virtual machine to the host in the laboratory. The relevant fix was incorporated into the upstream kernel in mid-October 2026

Virtualised infrastructure is at the heart of our service offering. A vulnerability such as PwnEscape highlights just how important it is to keep systems up to date. We have promptly assessed the impact and are deploying the fix on our systems. Deploying the updates on the affected systems has no affect on the operation of our customers’ systems.

We take security seriously. In such cases, we don’t wait: we act swiftly where action is needed and ensure that the systems our customers rely on remain reliable and up to date.