Vghost: A 9-year-old Linux vhost bug enabling local root and VM escape

Vghost: A 9-year-old Linux vhost bug enabling local root and VM escape(matrix.tencent.com)

6 points by torsi0n 9 hours ago | 1 comment

rvz 8 hours ago |

> Corvus AI discovered a high-severity memory corruption vulnerability in Linux's vhost virtualization acceleration subsystem (CVE-2026-74580, CVSS 8.8) in 2 hours

Another VM escape in Linux. This time it is thanks to memory corruption.

Linux will continue to have these VM escape bugs unless it is rearchitected and gradually rewritten in Rust since C is destroying Linux.