Posted by Jan Schaumann on Oct 15 The existence of this vulnerability was disclosed a few days ago on Twitter, and some of the details have now been published here: https://pwn.ai/blog/pwnescape This describes a host-memory disclosure and is phrased as a guest-to-host escape, although a second part going into more details of that is supposed to come later, it sounds like. There was some discussion on the netdev mailing list prior to this write-up and disclosure:...

Read the full article at oss-security →