New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-46316 | Linux kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry… | 9.3 | <1% | ||
| CVE-2026-53359 | Linux kernel: KVM: x86 | 8.8 | <1% | ||
| CVE-2026-64561 | Linux kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault… | 8.8 | <1% |
From the original article
3 min read at thehackernews.com
Swati Khandelwal Aug 06, 2026 Virtualization Security / Linux Zapscape , a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.