AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
Summary
A flaw in Linux's vhost subsystem, tracked as CVE-2026-74580 and named Vghost, allows local users to read and write kernel memory, granting them root privileges. In virtualization environments, this vulnerability can enable an untrusted virtual machine to access and manipulate the host's memory, potentially hijacking the virtual machine's execution program.
IFF Assessment
This vulnerability allows local users to gain root privileges and provides a pathway for virtual machines to compromise the host, posing a significant threat to system security.
Severity
Defender Context
This vulnerability highlights the critical need for prompt patching of Linux kernels, especially in environments utilizing virtualization. Defenders should monitor for exploit attempts targeting the vhost subsystem and implement strong access controls to limit local user privileges. The widespread impact across nearly a decade of kernel versions emphasizes the urgency of this security issue.