Two arm64-specific miscompiles induce vulnerabilities in curl
Curl's maintainer says two arm64-specific compiler miscompiles introduce vulnerabilities in curl.
5 stories, newest first · one card per story
Curl's maintainer says two arm64-specific compiler miscompiles introduce vulnerabilities in curl.

CVE-2026-89775 lets a malicious ARM64 KVM guest skip TLB invalidation and access host memory.

A Linux KVM bug on ARM64 with nested virtualization can let a guest read and write host kernel memory.

Linux kernel flaw CVE-2026-89775 lets ARM64 KVM guests read and write freed host memory, enabling guest-to-host escape.
Disclosed CVE-2026-89775 lets a guest VM escape to the host on KVM/arm64 systems with nested virtualization enabled.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views