Linux KVM ARM64 Race Condition Lets VMs Escape to Host (CVE-2025-XXXX)

Linux KVM ARM64 Race Condition Lets VMs Escape to Host (CVE-2025-XXXX)

A newly identified vulnerability in the Linux kernel threatens virtual machines running on ARM64 processors with KVM hypervisor support. Security researchers at Google discovered the flaw, which could allow a guest virtual machine to escape its isolated environment and gain unauthorized control over the host system. The issue, tracked as CVE-2025-XXXX, affects specific versions of the kernel and has prompted immediate patching efforts across maj…

Critical Linux KVM Flaw Enables Guest-to-Host Escape on ARM64 Systems

A critical vulnerability in the Linux Kernel-based Virtual Machine (KVM) for ARM64 systems could let attackers escape a virtual machine and gain read and write access to host kernel memory. This flaw, tracked as CVE-2026-89775, specifically affects ARM64 hosts with nested virtualization enabled and has been addressed in the mainline Linux kernel. Security researcher Hyunwoo

Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access

A newly disclosed Linux kernel vulnerability, tracked as CVE-2026-89775, could let attackers escape an ARM64 virtual machine and access the underlying host system. The issue affects KVM/arm64 environments where nested virtualization is enabled, creating a serious risk for multi-tenant cloud infrastructure and systems that allow untrusted users to create virtual machines. Security researcher Hyunwoo Kim […]

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled. The bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.