Seccomp denylist bypass via 32-bit argument truncation
Ricardo Branco says containerd, Podman, systemd and QEMU denylists can misread 32-bit arguments in 64-bit registers.
Stories per day · 30 days
1 RSS
Relatedlinux3cve-2026-745802privilege-escalation2vhost2vm-escape2containerd1iotlb1kernel1podman1seccomp1systemd1vghost1
4 stories, newest first · one card per story
Stories tagged #qemu
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Linux vhost flaw CVE-2026-74580 lets local users gain root and, in some setups, escape a guest to the host.
CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape
CVE-2026-74580 in Linux vhost lets local users gain kernel read/write and guests escape the VM.
Re: cloud computing provider disclosures
oss-security reply says Xen, KVM, QEMU, and Cloud Hypervisor already have separate disclosure processes.