importantSYS.SOURCE: The Hacker News• 2026-08-06T23:28:30+05:30

Critical KVM Vulnerability (CVE-2026-64561) Enables L1 Guest Code Escape to Linux Hosts

#kernel #vulnerability #linux #kvm #security

A critical KVM vulnerability (CVE-2026-64561) allows privileged L1 guests to escape to Linux hosts via a use-after-free flaw in the shadow-MMU. The issue affects Linux kernels 5.9 and later, with patches available, but unpatched systems remain at risk.

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.

The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page

Read original article

*** END OF TRANSMISSION ***

> GOOGLE IDENTIFIES VISHING CAMPAIGNS TARGETING FINANCIAL FIRMS FOR DATA THEFT AND RANSOM > CHINA-LINKED LIGHTSPY SPYWARE EXPANDS TO 13 COUNTRIES, INCLUDING THE US > DEFENSE TECH STARTUP HADRIAN SECURES $1.37 BILLION IN FUNDING AT $8 BILLION VALUATION > QWEN3.8 MAX ACHIEVES TOP RANKING IN AGENTIC INDEX EVALUATION > UNIONIZATION EFFORTS AMONG UNIVERSITY OF CALIFORNIA TECH WORKERS HIGHLIGHT LABOR RIGHTS AND INDUSTRY CHALLENGES > SMARTPHONE MOTION DETECTION MISCLASSIFIES RUNNING AS THEFT ATTEMPT > FCC ELIMINATES BROADCAST TV OWNERSHIP CAP, PAVES WAY FOR MEDIA CONSOLIDATION > CRITICAL KVM VULNERABILITY (CVE-2026-64561) ENABLES L1 GUEST CODE ESCAPE TO LINUX HOSTS > FORD'S FATHOM EV PICKUP FALLS SHORT OF REPLACING THE TAURUS LEGACY > BUMBLE EXPLORES SWIPE-FREE INTERACTION MODELS AND IN-PERSON MEETUPS TO REVITALIZE USER ENGAGEMENT> GOOGLE IDENTIFIES VISHING CAMPAIGNS TARGETING FINANCIAL FIRMS FOR DATA THEFT AND RANSOM > CHINA-LINKED LIGHTSPY SPYWARE EXPANDS TO 13 COUNTRIES, INCLUDING THE US > DEFENSE TECH STARTUP HADRIAN SECURES $1.37 BILLION IN FUNDING AT $8 BILLION VALUATION > QWEN3.8 MAX ACHIEVES TOP RANKING IN AGENTIC INDEX EVALUATION > UNIONIZATION EFFORTS AMONG UNIVERSITY OF CALIFORNIA TECH WORKERS HIGHLIGHT LABOR RIGHTS AND INDUSTRY CHALLENGES > SMARTPHONE MOTION DETECTION MISCLASSIFIES RUNNING AS THEFT ATTEMPT > FCC ELIMINATES BROADCAST TV OWNERSHIP CAP, PAVES WAY FOR MEDIA CONSOLIDATION > CRITICAL KVM VULNERABILITY (CVE-2026-64561) ENABLES L1 GUEST CODE ESCAPE TO LINUX HOSTS > FORD'S FATHOM EV PICKUP FALLS SHORT OF REPLACING THE TAURUS LEGACY > BUMBLE EXPLORES SWIPE-FREE INTERACTION MODELS AND IN-PERSON MEETUPS TO REVITALIZE USER ENGAGEMENT