Linode (Akamai): (PwnEscape) Guest-to-Host KVM Escape [CVE-2026-99999]

No impact listedStatus: identifiedStarted 2026-10-15 17:27 UTCNot resolved3 updatesstspg.io

Timeline of updates

identified2026-10-15 17:27 UTC
Akamai is aware of the recently published Guest-to-Host KVM Escape (CVE-2026-99999) vulnerability. Our teams have proactively identified its potential impact and are actively applying mitigations across our platform and infrastructure. There is potential for customer workload impact as a part of our platform response to this vulnerability. At this time, we have not observed evidence of this vulnerability being actively exploited on our platform. We will provide updates as additional information becomes available.
identified2026-10-16 08:53 UTC
We have not identified any exploitation on the Akamai platform so far. As of now, our subject matter experts are continuing to work on patching server sets in phases across the Akamai platform. We are actively monitoring our platform while we perform the mitigation actions.
identified2026-10-17 05:07 UTC
Akamai has completed patching Compute hypervisors for the known vulnerabilities related to CVE-2026-99999, also referred to as “PwnEscape”, and we have not identified any exploitation on the Akamai platform. We recommend that customers upgrade Linode guest VMs using kernels from upstream OS vendors as those become available, especially for cases where less trusted workloads are being run within containers or nested virtualization. We are in the process of preparing images containing fixes from upstream vendors.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).