New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-22 11:38 UTC
Importiert: 2026-09-28 11:52 UTC
CVSS: 9.3
Quelle-ID: thn_global
uid_hash: 4da8b2b8d69deb42c06b1e17b2d9e7ddccc3f4a934025014a223feaf1f0c64f6

The Hacker News

Inhalt

A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled.

The bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-89775	CRITICAL	9.3	CRITICAL	9.3			2026-09-16

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
The Hacker News	thn_global	security_news		-	de	https://feeds.feedburner.com/TheHackersNews

Zurueck zur Eintrags-Liste