As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-89775: Guest-to-Host Escape in KVM/arm64
CVE-2026-89775 is a guest-to-host escape vulnerability in KVM/arm64 that affects systems with nested virtualization enabled. The flaw stems from a type truncation in the stage-1 walk level, causing size computation to return 0, which is then misinterpreted as a valid value by the VNCR pseudo-TLB invalidation path.
Why it matters: Virtualization administrators and cloud providers running KVM/arm64 with nested virtualization must patch to prevent guest virtual machines from escaping and accessing host kernel memory.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-89775: Guest-to-Host Escape in KVM/arm64
CVE-2026-89775 is a guest-to-host escape vulnerability in KVM/arm64 that affects systems with nested virtualization enabled. The flaw stems from a type truncation in the stage-1 walk level that causes incorrect size computation, leading to misinterpretation in the VNCR pseudo-TLB invalidation path. The vulnerability was disclosed following the expiration of an embargo agreed with Linux maintainers.
Why it matters: Organizations running KVM/arm64 hypervisors with nested virtualization should assess exposure to guest escape attacks; a CVSS 9.3 vulnerability allows untrusted guests to compromise the host.
- Source published
- First seen by Cybersecurity Tracker