> TritonInfoSec News
Home / Sep 23, 2026 / Story
0
#6 The Hacker News general September 22, 2026 at 11:38 UTC

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

By [email protected] (The Hacker News)

AI Summary

CVE-2026-89775 is a Linux kernel KVM vulnerability on ARM64 processors that exposes freed host memory to guest VMs when nested virtualization is enabled, allowing a guest to read and write host kernel memory and potentially escape to the host. The researcher who discovered the bug confirmed it can be leveraged for guest-to-host code execution, making it critical for cloud and virtualization environments running ARM64 KVM workloads.

Read full article → https://thehackernews.com/2026/09/new-linux-kernel…

Relevance score: 85.0/100

# More from September 23

  1. 1
    ShinyHunters claims FBI hack, data theft in PeopleSoft zero-day breach BleepingComputer
  2. 2
    EvilTokens PhaaS disrupted after compromising 12,000 Microsoft accounts BleepingComputer
  3. 3
    Check Point warns of Management Server zero-day exploited in attacks BleepingComputer
  4. 4
    WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers The Hacker News
  5. 5
    Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access The Hacker News
  6. 7
    New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups The Hacker News
  7. 8
    Google Fined €403 Million Over GDPR Violations Tied to Location Data The Hacker News
  8. 9
    Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer SecurityWeek
  9. 10
    Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme SecurityWeek