CERT24New Zapscape KVM flaw could let privileged L1 guest escape to Linux hostsLoading data…
CERT24Threat Observatory
Period

New Zapscape KVM flaw could let privileged L1 guest escape to Linux hosts

Linux kernel vulnerability CVE-2026-64561 affects KVM/x86 shadow MMU memory management. Under specific conditions, code with kernel privileges inside an L1 guest VM may escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.

← Back to intelligence

New Zapscape KVM flaw could let privileged L1 guest escape to Linux hosts

Linux kernel vulnerability CVE-2026-64561 affects KVM/x86 shadow MMU memory management. Under specific conditions, code with kernel privileges inside an L1 guest VM may escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests.