$1 MILLION SANDBOX CHALLENGE UNCOVERS LINUX KERNEL FLAWS

Summary from the TLDR InfoSec newsletter

Vercel's two-week sandbox bounty received 1,285 reports and validated 92 findings, including one critical issue. No report accessed customer data. A leading submission chained two Linux networking flaws: one leaked host-kernel memory and another deterministically crashed the host. Patches remain under private review, and CVEs are pending.