r/netsec • u/mlgbcnmsl • 1d ago

Vghost (CVE-2026-74580): Linux kernel vhost stale IOTLB cache leading to universal LPE and Guest-to-Host escape vector

https://www.openwall.com/lists/oss-security/2026/10/14/2
41 Upvotes

91% Upvoted

3 comments sorted by

15

u/Party-Option-7137 1d ago

crazy amount of VM and container 'escape' bugs lately.

Feels like nothing is actually isolated anymore.

8

u/TheG0AT0fAllTime 1d ago

To be blunt it never was.

3

u/ph0n3Ix 18h ago

Ai is forcing many sectors to go through their Truman show moment all at once it seems.