Firecracker MicroVM Escape Allows Root Code Execution on Host
Researchers escape Firecracker microVM and achieve root code execution on the host by modifying saved registers in pt_regs.
Stories per day · 30 days
6 RSS
Relatedlinux7vm-escape7cve-2026-999994firecracker4linux-kernel3kernel2pwnescape2sandbox2vercel2virtualization2cache1cloud1guest-host-escape1hypervisor1ipv41mmio1networking1openshift1
22 stories, newest first · one card per story
Stories tagged #kvm
Runbook hardens shared Linux hosts against cache covert channels
The guide covers KVM, Firecracker and QEMU: separate cores, disable KSM, keep CPU mitigations, and partition L3 with resctrl.
Linux networking flaw lets KVM guests escape to the host
Pwn.ai leaked host memory on Vercel production sandboxes and gained root on lab hosts; guest-only updates do not fix it.
2
Linux KVM/x86 stale SMM MMIO cache bypasses write tracking
A guest can make a tracked RAM write look like KVM_EXIT_MMIO, so a VMM may change the page without write tracking.
Linux kernel patch closes PwnEscape KVM guest-to-host escape
CVE-2026-99999 lets an x86 KVM guest alter already-validated IP packets, read host memory, and potentially run code.
8
Linux KVM guest-host escape PwnEscape rated 9.3
Malformed IPv4 checksum metadata can cross the guest-host boundary; an upstream kernel fix is reaching major distros.
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
Researchers show CVE-2026-99999 lets a KVM guest escape to the host via Linux checksum handling.
Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
Linux patched CVE-2026-99999, a networking flaw researchers used to escape VMs to the host.
13
Researchers Use AI to Discover Critical Linux Kernel Flaw That Enables Virtual Machine Escape
pwn.ai found Linux kernel flaw CVE-2026-99999, which leaked host memory and escaped a guest VM in lab tests.
linux kernel: PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999)
A write-up claims Linux KVM guest-to-host escape CVE-2026-99999, so far described as host-memory disclosure.
Security researcher claims they found KVM guest-host escape flaw
Paulos Yibelo claims a KVM guest-to-host root escape zero-day found via Vercel’s Firecracker sandbox bounty.
13
Muse escapes containment
Meta patched a pre-launch Muse AI agent KVM escape that could have exposed internal databases.
Meta Rushed to Fix Muse ‘VM Escape' Vulnerability Immediately Before Launch
Meta rushed fixes for Muse AI agent VM-escape flaws, including one that could reach Meta's sensitive internal databases, with engineers warning of a future breach.
Re: cloud computing provider disclosures
oss-security reply says Xen, KVM, QEMU, and Cloud Hypervisor already have separate disclosure processes.
Vercel Confirms KVM Zero-Day VM Escape, Awards Researcher $50,000
Vercel confirmed researcher Paulos Yibelo's KVM zero-day guest-to-host root escape and paid a $50,000 bounty.
Linux KVM/x86 (tested on 6.1.74): guest-triggered host panic via SMM shadow MMU
A KVM x86 shadow-MMU bug lets an L1 guest panic the Linux host via nested VMX and SMM.
Virtio-nvgpu: Near-native Nvidia GPU access inside a KVM guest
Open-source virtio-nvgpu project provides near-native Nvidia GPU access inside KVM virtual machine guests.
Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access
CVE-2026-89775 lets a malicious ARM64 KVM guest skip TLB invalidation and access host memory.
Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems
A Linux KVM bug on ARM64 with nested virtualization can let a guest read and write host kernel memory.
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Linux kernel flaw CVE-2026-89775 lets ARM64 KVM guests read and write freed host memory, enabling guest-to-host escape.
3
CVE-2026-89775: Guest-to-Host Escape in KVM/arm64
Disclosed CVE-2026-89775 lets a guest VM escape to the host on KVM/arm64 systems with nested virtualization enabled.
ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability
The Linux kernel KVM IOAPIC has a use-after-free (CVSS 8.2) allowing local privilege escalation, but exploitation requires high-privileged code execution first.