New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Summary
A vulnerability in the Linux kernel's KVM virtualization for ARM64 processors, tracked as CVE-2026-89775, allows a guest virtual machine to gain read-write access to host memory when nested virtualization is enabled. A researcher claims this flaw can be exploited for a guest escape, enabling code execution on the host machine.
IFF Assessment
This vulnerability allows an attacker to gain unauthorized read-write access to host memory and potentially execute code on the host system, representing a significant threat to defenders.
Severity
Defender Context
This vulnerability highlights the ongoing risks associated with virtualization environments, particularly when nested virtualization is enabled. Defenders should monitor for patches to the Linux kernel and KVM, and carefully assess the security implications of enabling nested virtualization on ARM64 systems.