As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape
CVE-2026-74580, termed Vghost, is a stale input/output translation lookaside buffer (IOTLB) metadata-cache vulnerability in Linux vhost frontends that allows local users with access to /dev/vhost-* to perform arbitrary kernel read and write operations. The vulnerability also enables guest virtual machines using vIOMMU with specific configurations to achieve QEMU heap overwrites and control-flow hijacking, potentially resulting in privilege escalation and virtual machine escape.
Why it matters: Linux administrators and hypervisor operators must patch systems running vulnerable vhost implementations, as local attackers can escalate to root and guests can break out of virtual machines.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-74580: Linux vhost stale IOTLB cache leading to LPE and VM escape
CVE-2026-74580, termed Vghost, is a stale input/output translation lookaside buffer (IOTLB) metadata-cache vulnerability in Linux vhost frontends that allows local users with access to /dev/vhost-* to perform arbitrary kernel read and write operations. The vulnerability also enables guest virtual machines using vIOMMU with specific configurations to achieve QEMU heap overwrites and control-flow hijacking, potentially resulting in privilege escalation and virtual machine escape.
Why it matters: Linux administrators and hypervisor operators must patch systems running vulnerable vhost implementations, as local attackers can escalate to root and guests can break out of virtual machines.
- Source published
- First seen by Cybersecurity Tracker