Vghost: A 9-year-old Linux vhost bug enabling local root and VM escape

(matrix.tencent.com)

4 points | by torsi0n 5 hours ago ago

1 comments

  • rvz 5 hours ago ago

    > Corvus AI discovered a high-severity memory corruption vulnerability in Linux's vhost virtualization acceleration subsystem (CVE-2026-74580, CVSS 8.8) in 2 hours

    Another VM escape in Linux. This time it is thanks to memory corruption.

    Linux will continue to have these VM escape bugs unless it is rearchitected and gradually rewritten in Rust since C is destroying Linux.