CVE-2026-99999 (PwnEscape) – Unraid kernel vulnerability and security update plans?

Hi Unraid Team,

I'd like to raise awareness of the recently disclosed Linux kernel vulnerability CVE-2026-99999 (PwnEscape) and ask whether its potential impact on current Unraid OS releases has already been assessed.

The vulnerability affects IPv4 checksum handling in the Linux kernel and may allow an attacker to escape from a KVM guest and potentially execute code on the host under certain conditions.

According to the published release notes:

Unraid OS 7.3.3 (stable, October 8) uses Linux kernel 6.18.54-Unraid.

Unraid OS 7.4.0-rc1 also uses Linux kernel 6.18.54-Unraid.

The upstream fix was integrated into the Linux 6.18 stable series with version 6.18.57, released on October 15.

Since Unraid also relies on KVM for virtualization, this raises a few questions:

Has the Unraid team already assessed CVE-2026-99999?

Are current releases affected, or has the relevant fix already been backported into the Unraid kernel?

If affected, is a security update planned for the current stable 7.3.x branch?

Would a targeted kernel update or hotfix be possible without waiting for Unraid 7.4 or the upcoming Unraid 8?

Are there any officially recommended temporary mitigations for users running virtual machines until a patched kernel becomes available?

Could the team provide a security advisory or confirmation of the vulnerability status so users can assess the risk to their systems?

I'm aware that Unraid 8 is expected to introduce a different underlying distribution and improvements to security update delivery.

However, given the potential severity of this vulnerability, I believe it would be helpful to clarify the situation for current Unraid 7.x installations as well.

This is not intended as criticism of the development or release schedule.

I'm primarily interested in understanding the actual exposure and whether users need to take any immediate action.

References:

Research and technical analysis: https://www.pwn.ai/blog/pwnescape

Upstream kernel fix: https://github.com/torvalds/linux/commit/6785011f8b16abf40b1e9d8b2e332232b3e68822

Linux 6.18.57 changelog: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.18.57

Red Hat vulnerability assessment: https://access.redhat.com/security/cve/cve-2026-99999

Thanks in advance for any clarification or guidance from the Unraid team