vhost (Product): news timeline & CVEs

DPDK security advisory: Multiple vulnerabilities in vhost/vhost-crypto/vDPA/GSO libraries

DPDK patched guest-triggerable memory-safety flaws in vhost, vhost-crypto, vDPA, and GSO.

The DPDK project fixed multiple memory-safety vulnerabilities in its vhost, vhost-crypto, vDPA, and GSO libraries after advance notice to downstream stakeholders. A malicious guest can exploit the flaws, including across the vhost-user boundary, to crash the host, cause denial of service, or potentially corrupt memory. The published notice does not list CVE identifiers and does not say exploitation has been observed.

oss-securityOct 14, 15:07 UTC · 2d agoVulnerability2· 1 read

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

Linux vhost flaw CVE-2026-74580 lets local users gain root and, in some setups, escape a guest to the host.

Tencent Zhuque Lab disclosed CVE-2026-74580, named Vghost, a Linux vhost bug present from kernel 4.11 through 7.2-rc4. A local user can read and write kernel memory, bypass KASLR, and become root; with virtio behind a virtual IOMMU in device-IOTLB mode, a guest can write into the host QEMU process and hijack it. Working demos were published on October 12, but no in-the-wild exploitation is reported. kernel.org scores it 8.8, while Red Hat and Oracle score 7.3 and Amazon 7.8; Red Hat, Amazon Linux, and Oracle Linux have shipped fixes, and some Ubuntu kernels were still in progress as of October 13.

The Hacker Newsupdated Oct 16, 11:37 UTC · 13h agofirst Oct 14, 07:46 UTC · 2d agoVulnerability 7 sources CVE-2026-745802· 1 read

CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape

CVE-2026-74580 in Linux vhost lets local users gain kernel read/write and guests escape the VM.

Researchers disclosed Vghost, CVE-2026-74580, a stale IOTLB metadata-cache flaw in Linux vhost frontends. A local user with access to /dev/vhost-* can obtain arbitrary kernel read and write and escalate to root. A guest configured with vIOMMU, iommu_platform, and VIRTIO_F_RING_RESET can overwrite the QEMU heap and hijack control flow, enabling VM escape. The oss-security post describes the bug and impact; it does not report observed exploitation.

oss-securityupdated Oct 16, 11:37 UTC · 13h agofirst Oct 14, 02:34 UTC · 2d agoVulnerability 7 sources CVE-2026-745801· 1 read

vhost

Timeline3 articles

Related CVEsby mentions

Appears with

DPDK security advisory: Multiple vulnerabilities in vhost/vhost-crypto/vDPA/GSO libraries

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape