Developing3 outlets · over 2 hours
Zapscape KVM Flaw Lets Guests Escape to Host
Zapscape (CVE-2026-64561) is a Linux KVM/x86 use-after-free in the shadow MMU's recursive zap path. Hyunwoo Kim's proof-of-concept escapes an L1 guest to run host commands with root privileges, creating /Zapscape. The fix, commit 2abd5287f083, was merged July 21.
The story so far2 updates, latest first.
Tracked by ByteBrief