SecurityThe Hacker Newsabout 3 hours ago
Zapscape KVM Flaw Lets L1 Guest Code Escape to Host
1 min read
Zapscape, tracked as CVE-2026-64561, is a KVM/x86 shadow-MMU use-after-free allowing privileged L1 guest code to execute on Linux hosts. Researcher Hyunwoo Kim disclosed it August 6; the fix is merged. Affected Linux versions include 5.9 through 7.1.6, with Red Hat scoring it 7.0.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
