Threat Intelligence Brief
Curated summary with source attribution
Source: thehackernews.com
Threat Risk: High
Victim: Cloud providers and enterprises using KVM nested virtualization
Incident: Discovery of a guest-to-host escape vulnerability in Linux KVM.
Impact: Full host system compromise and root-level code execution.
Attacker: Unidentified threat actors
Analysis: The Zapscape vulnerability (CVE-2026-64561) is a use-after-free flaw in KVM’s shadow MMU bookkeeping. By manipulating page fault handling during nested virtualization, an L1 guest with root privileges can bypass isolation and execute arbitrary code on the host kernel. While a proof-of-concept exists, real-world exploitation requires specific guest-to-host memory configurations.
Recommendations: Update Linux kernels to the latest stable versions or vendor-patched releases.; Disable nested virtualization for untrusted guests unless strictly necessary.; Audit KVM configurations to ensure only trusted tenants have L1 guest privileges.
Source: The Hacker News
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source