TThe Hacker NewsinVulnerability·high
Linux Kernel vhost Subsystem Flaw Enables Privilege Escalation and VM Escape
A vulnerability in the Linux kernel's vhost subsystem tracked as CVE-2026-74580 and named Vghost allows a local user to read and write kernel memory at will, escalate to root, and in virtualization configurations escape a guest VM to compromise the host process. The flaw was discovered by Tencent Zhuque Lab and publicly reported on October 14, 2026. Patches are available in recent stable kernel releases.
11m
