#kvm
-
Linux Kernel Flaw Gives ARM64 KVM Guests Access to Host Memory
The CVE-2026-89775 bug in the Linux kernel's nested-virtualization code for ARM64 lets a guest read and write host memory — and, the researcher says, escape the guest to run code on the host.
-
“KVM Chainsaw”: Cleaning Up the Virtualization Code in Linux 7.3
The Linux 7.3 merge window has accepted the KVM changes: mostly bug fixes and code cleanup, including the breakup of one of the more unwieldy data structures.
-
Zapscape: KVM Vulnerability Lets Attackers Escape a Guest VM onto the Linux Host
A new bug in KVM/x86's shadow MMU (CVE-2026-64561) lets privileged code inside a nested virtual machine run commands on the host as root. The risk applies to systems running nested virtualization exposed to untrusted guests.
-
“KVM Chainsaw”: Cleaning Up the Kernel's “God Structure” in Linux 7.3
KVM maintainer Paolo Bonzini has merged into the next branch a patch series that splits the overloaded kvm_mmu structure into three parts. The work is slated for the Linux 7.3 development cycle.
-
Stable Linux kernel updates close two critical vulnerabilities
Greg Kroah-Hartman has announced the release of seven stable Linux kernels at once, fixing two significant security vulnerabilities. Users are advised to update as soon as possible.