Vghost: A 9-year-old Linux vhost bug enabling local root and VM escape

Posted by torsi0n on Wednesday October 14, 2026 @01:24PM
from the matrix.tencent.com dept.

https://matrix.tencent.com/en/2026/10/12/vghost-cve-2026-74580

( 1 comment | 4 points | on HN )

Re:Vghost: A 9-year-old Linux vhost bug enabling local root ... by rvz on Wednesday October 14, 2026 @01:56PM (#50091994)

> Corvus AI discovered a high-severity memory corruption vulnerability in Linux's vhost virtualization acceleration subsystem (CVE-2026-74580, CVSS 8.8) in 2 hours

Another VM escape in Linux. This time it is thanks to memory corruption.

Linux will continue to have these VM escape bugs unless it is rearchitected and gradually rewritten in Rust since C is destroying Linux.

[ Parent | on HN ]