#виртуализация
-
Linux Plumbers in Prague: what the sched_ext microconference discussed
The Linux Plumbers Conference blog has published a report from the sched_ext microconference. Three topics dominated: priority inversion, paravirtualized scheduling, and hardware topology in task placement.
-
Vghost: Linux kernel bug hands local users root and lets a guest break out to the host
A flaw in the vhost subsystem let a local user read and write kernel memory and become root for almost nine years, and in one virtualization setup let an untrusted VM break out to the host. The bug was found by Tencent's AI pipeline.
-
Huntress Reports VMware ESXi Exploitation in the Wild
Researchers at Huntress have observed exploitation of a VMware ESXi hypervisor flaw that allows an attacker to escape the confines of a virtual machine.
-
Linux Kernel Flaw Gives ARM64 KVM Guests Access to Host Memory
The CVE-2026-89775 bug in the Linux kernel's nested-virtualization code for ARM64 lets a guest read and write host memory — and, the researcher says, escape the guest to run code on the host.
-
Broadcom Patches Critical Vulnerability in VMware Workstation and Fusion
The integer overflow flaw lets an attacker with administrator privileges inside a virtual machine execute arbitrary code on the host system. There are no workarounds — only an update helps.
-
“KVM Chainsaw”: Cleaning Up the Virtualization Code in Linux 7.3
The Linux 7.3 merge window has accepted the KVM changes: mostly bug fixes and code cleanup, including the breakup of one of the more unwieldy data structures.
-
Multikernel Linux: multiple kernels on one machine without a hypervisor
The first public release of the multikernel Linux tree, 7.0-mk2, is out. The technology lets you run several independent kernel instances on bare metal, bypassing virtualization, and promises a performance edge over KVM.
-
QEMU 11.1: UFS Write Booster Emulation, New RISC-V and Arm Extensions
The popular emulator and virtualization system QEMU 11.1 has been released. There are no major new features in this version, but the set of improvements touches several subsystems at once.
-
Zapscape: KVM Vulnerability Lets Attackers Escape a Guest VM onto the Linux Host
A new bug in KVM/x86's shadow MMU (CVE-2026-64561) lets privileged code inside a nested virtual machine run commands on the host as root. The risk applies to systems running nested virtualization exposed to untrusted guests.
-
Ubuntu 26.04 LTS to Get a Separate HWE Stack for Virtualization
Alongside the traditional hardware enablement stack, Canonical will add a dedicated set of packages for virtualization and confidential computing, in order to bring the latest AMD SEV-SNP and Intel TDX capabilities into the LTS release.
-
“KVM Chainsaw”: Cleaning Up the Kernel's “God Structure” in Linux 7.3
KVM maintainer Paolo Bonzini has merged into the next branch a patch series that splits the overloaded kvm_mmu structure into three parts. The work is slated for the Linux 7.3 development cycle.
-
Sheetz store chain drops VMware over Broadcom's policies
The American roadside store chain Sheetz is migrating all 838 of its locations from VMware to the StorMagic platform. The cited reason is the “far too much uncertainty” that arose after Broadcom acquired VMware.
-
Google Pays $250K for a Linux Vulnerability Allowing Guest VM Escape
Two vulnerabilities have been discovered in Linux that grant unprivileged users root access. For one of them, which allows escaping a guest virtual machine, Google paid the researcher $250,000.
-
16-year-old Januscape vulnerability found in the Linux kernel enables virtual machine escape
Researchers have discovered a vulnerability in the Linux kernel called Januscape that had existed for 16 years. It allows attackers to break out of a virtual machine and execute arbitrary code on the host system.