A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost.
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
About this summary. This is a short, independently written summary of an article first published by The Hacker News. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html
Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
No, Your Tools Are Not Enough: It's Time to Bring Agents to the Hunt
arXiv:2610.14729v1 Announce Type: new Abstract: Modern software systems are large and complex, demanding scalable and autonomous techniques for vulnerability discovery…
Chrome for Android Update
Hi, everyone! We've just released Chrome 155 (155.0.8059.79) for Android. It'll become available on Google Play over the next few days.
Stable Channel Update for Desktop
The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of…
Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Serial Number:AV26-1038 Date: October 13, 2026 As of October 13, 2026, Microsoft is affected by vulnerabilities in the following products: .NET 10.0 .NET 11.0 .NET 8.0…
USN-8924-1: Linux kernel vulnerabilities
It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local attacker could…
USN-8918-1: Linux kernel (Azure) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with…