AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
5 Articles
5 Articles
A serious security flaw has been discovered in the Linux kernel that could allow a local user to take complete control of the system. The bug, dubbed Vghost and designated CVE-2026-74580, exists in code that has been in development for years. In... Full version of the page: https://ithardware.pl/aktualnosci/linux_blad_root_uzytkownik-55067.html
Vghost vulnerability (CVE-2026-74580) affects the Linux kernel and can allow elevation of privileges to root and, in specific settings, escape virtual machines. Failure involves the vhost subsystem and requires attention from system administrators, especially in cloud and virtualization environments. The main recommendation is to update the kernel, restrict access to vhost devices and apply the distribution security guidelines used.
PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape
A public proof of concept for Vghost, a high-severity Linux vhost flaw tracked as CVE-2026-74580, shows how the bug can let a local user gain root access or, in certain virtual machine setups, break out of a guest and affect the host. The issue has a CVSS v3.1 score of 8.8 and is fixed in […]
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine. The bug is tracked as CVE-2026-74580 and named Vghost. Tencent Zhuque Lab, which found the
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium





