Google Pays a Record $250K Bounty for a Linux Guest-VM Escape

Ars Technica·medium signal

Google awarded $250,000 for a high-severity Linux kernel vulnerability allowing escape from a guest VM, one of two Linux flaws surfacing this week that let untrusted users gain root. Guest escape is the failure mode that breaks the isolation assumption underneath every multi-tenant inference host and sandboxed agent runtime. Anyone running untrusted agent-generated code in VM isolation should treat this as a patching priority, not a kernel-team curiosity.