New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

The Hacker News 6 August 2026, 20:58 EEST Security Systems

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page…

Read the full story on The Hacker News https://thehackernews.com/2026/08/new-zapscape-kvm-flaw-could-let.html

Attacks like this land on ordinary sites far more often than on chosen targets. If you would rather your site never became the story, CrockyHost hosting ships with daily backups, automatic updates and a firewall we manage.

Keep reading

Boston Scientific says cyberattack disrupted operations globally BleepingComputer
Hackers target Microsoft SharePoint RCE chain with PoC exploit BleepingComputer
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions The Hacker News
Ubiquiti patches three max severity security vulnerabilities BleepingComputer