AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
-
A newly disclosed vulnerability in the Linux kernel's vhost subsystem allows a local user to read and write kernel memory at will, escalating privileges to root across nearly a decade of kernel versions. Tracked as CVE-2026-74580 and named Vghost, the flaw was discovered by Tencent Zhuque Lab.
Beyond straightforward local privilege escalation, the bug carries serious implications for virtualization environments. In at least one configuration, it allows an untrusted virtual machine to write to the host's memory and hijack the program responsible for running that VM — effectively breaking guest isolation and moving the attack from the guest out to the host.
Key points:
- A local attacker can achieve arbitrary kernel memory read and write, leading to root.
- The vulnerability affects nearly a decade of kernel versions.
- In a virtualization setup, an untrusted VM can write to host memory and take over the VM runner, escaping the guest boundary.
- The flaw resides in the vhost subsystem.
Given the long window of affected kernel versions and the potential for guest-to-host escape, administrators running multi-tenant or untrusted virtualization workloads should treat this as high priority and watch for vendor patches and updated kernel packages.
Source: The Hacker News
Does your organization run untrusted or multi-tenant VMs on affected kernels, and how are you planning to mitigate exposure until patches land?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login