$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws

2026-09-18

Vercel's $1 million sandbox bounty challenge identified 92 vulnerabilities, including a critical one, from 1,285 reports, with no customer data accessed. A notable submission involved chaining two Linux networking flaws that led to host-kernel memory leaks and host crashes. Patches are under private review, and CVEs are pending.