New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

AI Summary

CVE-2026-64561, dubbed Zapscape, is a new Linux kernel vulnerability in KVM/x86's shadow MMU that allows an attacker with kernel privileges inside an L1 guest VM to escape KVM isolation and execute code on the host when nested virtualization is exposed to untrusted guests. The flaw is particularly relevant to cloud and virtualization providers where untrusted workloads run in nested VM configurations.

Read full article → https://thehackernews.com/2026/08/new-zapscape-kvm…

Relevance score: 73.0/100

# More from August 08

1
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People The Hacker News
2
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers The Hacker News
3
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability SecurityWeek
4
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP The Hacker News
5
Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison SecurityWeek
6
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs The Hacker News
7
Metabase SQLi zero-day exploited in customer data-theft attacks BleepingComputer
8
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets The Hacker News
9
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online CyberScoop