Developing2 outlets · over 2 hours
Zapscape (CVE-2026-64561)
Zapscape (CVE-2026-64561) is a use-after-free in KVM/x86's shadow MMU allowing L1 guests with kernel privileges to execute code on the host. Discovered by Hyunwoo Kim, it affects Linux 5.9 and later. The fix, commit 2abd5287f083, was merged July 21.
The story so far2 updates, latest first.
Tracked by ByteBrief