$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
Summary
Vercel ran a $1 million bug-bounty program for two weeks to find security flaws in its sandbox (an isolated environment for running untrusted AI code), receiving 1,285 reports. The most significant finding was two independent defects in the Linux kernel's networking stack that could leak memory from the host system or crash it, affecting many cloud providers that use the same isolation approach. No reports successfully accessed real customer data, but the discovered kernel flaws were reported to Linux maintainers ahead of public disclosure.
Solution / Mitigation
According to Vercel's architectural recommendations from Trail of Bits engineers, the control plane should 'stop trusting the guest' by ensuring that values returned by code inside the microVM are either derived server-side or signed with a key the guest cannot access. Additionally, the source notes that 'The fixes are under private review and CVEs are pending' for the Linux kernel flaws themselves, but specific patch details are not disclosed in this article.
Classification
Affected Vendors
Original source: https://www.securityweek.com/1-million-sandbox-challenge-uncovers-linux-kernel-flaws/
First tracked: September 15, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 85%