Securityweek $1 Million Sandbox Challenge Reveals Linux Kernel Vulnerabilities
Article Content
- •Vercel's bug-bounty program yielded 1,285 reports, including critical Linux kernel flaws.
- •Two major defects were found, one leaking memory and another causing host crashes.
- •The program highlighted the increasing role of AI in cybersecurity research and reporting.
Vercel's two-week bug-bounty program identified 1,285 reports, revealing critical flaws in the Linux kernel's networking stack. The program, which ran from August 18 to September 1, offered a $1 million reward and involved both black box and white box testing. Among the findings, one critical defect leaks memory from the host kernel, while another causes deterministic crashes. No reports indicated access to customer data, but the findings will help improve Vercel's product. The vulnerabilities have significant implications for major cloud providers that rely on the same Linux kernel layer for workload isolation. Vercel plans to publish details once fixes are under review and CVEs are assigned. The report triage process utilized AI assistance to manage the high volume of submissions, demonstrating the evolving role of AI in cybersecurity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Vercel and CVE-2026-53362 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
North Korean Hackers Steal $6.3 Billion from Binance in Record Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a massive security breach resulting in the theft of approximately $6.3 billion across ten blockchains. The attack is attributed to North Korea's TraderTraitor hacking group, which gained access via a compromised DevOps engineer's… 
Chinese Actor Compromises US Government Networks via PHP2Shell Exploit A suspected Chinese nation-state actor exploited vulnerabilities in Palo Alto Networks firewalls using a chained PHP2Shell exploit and a Linux kernel privilege escalation flaw. The attack, which began on October 23, targeted 25 servers across the US, Japan, Taiwan, and South Korea, with a focus on US…