Linux KVM (Product): news timeline & CVEs

Security researcher claims to they found KVM guest-host escape flaw

Researcher claims a KVM guest-to-host escape zero-day; Vercel confirmed it, but no details are public.

Security researcher Paulos Yibelo says he won a Vercel bug bounty for a full guest-to-host root escape in industry-standard hypervisors. Vercel CEO Guillermo Rauch said the company confirmed a Linux KVM zero-day affecting Vercel Sandbox, which uses AWS Firecracker MicroVMs on KVM. No CVE, exploit details, or patch have been published, and The Register found no related mailing-list discussion. KVM is widely used by AWS, Google, Nutanix, HPE, and Proxmox; the article also recalls the earlier Januscape KVM bug.

The Register · SecurityOct 6, 02:06 UTC · 3d agoVulnerability 3 sources

Security researcher claims they found KVM guest-host escape flaw

Paulos Yibelo claims a KVM guest-to-host root escape zero-day found via Vercel’s Firecracker sandbox bounty.

Security researcher Paulos Yibelo says a Vercel bug-bounty submission uncovered a full guest-to-host root escape in Linux KVM, the hypervisor behind Firecracker MicroVMs. Vercel CEO Guillermo Rauch said the company confirmed a KVM zero-day affecting its Sandbox product, which runs AI-agent workloads in Firecracker. No CVE, patch, proof-of-concept, or mailing-list discussion is public, and exploitation has not been reported. KVM also underpins clouds and platforms from AWS, Google, Nutanix, HPE, and Proxmox; The Register notes Januscape as another serious KVM bug found this year.

The Register · SecurityOct 6, 02:06 UTC · 3d agoVulnerability 3 sources1

Muse escapes containment

Meta patched a pre-launch Muse AI agent KVM escape that could have exposed internal databases.

In the weeks before launching its Muse AI agent, Meta found several security flaws, including kernel-based virtual machine escapes. At least one could have let an ordinary Muse user break out of the isolated KVM and reach sensitive internal Meta databases and services. The issues were escalated to Mark Zuckerberg, and teams rushed to fix a spike in reported KVM escapes before launch. At least one flaw was related to a Linux KVM exploit identified in July.

404 MediaOct 5, 15:38 UTC · 3d agoAI safety & security2

Meta patches Muse exploit that let attackers control the AI agent

Meta patches a Muse AI agent zero-day exploit allowing attackers to control the agent, while a Linux KVM flaw enables guest-to-host memory access and a SharePoint flaw enables authenticated remote code execution.

Meta patches a Muse zero-day exploit that allows attackers to control an AI agent, while a Linux KVM flaw gives ARM64 KVM guests read/write host memory and a SharePoint flaw enables authenticated RCE.

The Verge · AISep 22, 11:53 UTC · 16d agoOther

Linux KVM

Timeline4 articles

Appears with

Security researcher claims to they found KVM guest-host escape flaw

Security researcher claims they found KVM guest-host escape flaw

Muse escapes containment

Meta patches Muse exploit that let attackers control the AI agent