The Hacker News

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical Linux kernel flaw let a guest VM read host memory in Vercel's live sandboxes; host code execution was shown only ...

Linux Kernel 'PwnEscape': What Virtual Machine Users Should Check Immediately

For those who thought that being inside a virtual machine meant being isolated from the host world, this report might send a ...
Cybernews

Critical Linux kernel vulnerability leads to full KVM escape

PwnEscape Linux vulnerability lets VM guests leak host memory via malformed IPv4 packets. See what the evidence shows ...
LWN.net

BPF: the universal in-kernel virtual machine

Much of the recent discussion regarding the Ktap dynamic tracing system was focused on the addition of a Lua interpreter and virtual machine to the kernel. Virtual machines seem like an inappropriate ...

Cloud security cannot be protected by guest OS patches alone—Considering the responsibility of virtualization infrastructure from the perspective of Linux kernel vul…

Introduction: Why cloud providers stop accepting new sign-upsIn October 2026, information was reported regarding ...
BleepingComputer

Google now pays $250,000 for KVM zero-day vulnerabilities

Google has launched kvmCTF, a new vulnerability reward program (VRP) first announced in October 2023 to improve the security of the Kernel-based Virtual Machine (KVM) hypervisor that comes with ...

PwnEscape: Critical Linux kernel flaw allows VM escape

The flaw is in Linux’s networking code and, researchers say, belongs to a new class of vulnerabilities. Cloud hosts are affected, too.
Cybernews

Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

XBOW’s AI system found a high-severity Linux kernel flaw that can let some users gain root privileges. The bug affects SMC-D code that now runs on ordinary x86 Linux machines through loopback ...