> TritonInfoSec News
Home / Oct 15, 2026 / Story
0
#7 The Hacker News general October 14, 2026 at 07:46 UTC

AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

By [email protected] (The Hacker News)

AI Summary

CVE-2026-74580 ('Vghost'), discovered by Tencent Zhuque Lab, is a Linux kernel vhost subsystem flaw affecting nearly a decade of kernel versions that grants local users arbitrary kernel memory read/write and root privileges. In virtualized environments, it additionally allows a guest VM to write to host memory and hijack the hypervisor process, enabling a full VM escape. Security teams running multi-tenant or cloud virtualization stacks on affected kernel versions should treat this as critical.

Read full article → https://thehackernews.com/2026/10/ai-found-linux-k…

Relevance score: 84.0/100

# More from October 15

  1. 1
    Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days BleepingComputer
  2. 2
    CISA warns admins to immediately fix Ivanti flaw exploited as zero-day BleepingComputer
  3. 3
    Global takedown hits network behind 1 billion phishing messages BleepingComputer
  4. 4
    FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested BleepingComputer
  5. 5
    Cisco patches new Secure Email Gateway zero-day exploited in attacks BleepingComputer
  6. 6
    Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days The Hacker News
  7. 8
    U.K. Sanctions Cryptomus for RU Money Laundering Krebs on Security
  8. 9
    OpenAI engineer arrested for allegedly planting spy device in office BleepingComputer
  9. 10
    Ghostscript flaw lets hackers hijack servers via PDF uploads BleepingComputer