CuraSec

Act active

Zapscape KVM Flaw Enables L1 Guest-to-Host Escape via Shadow MMU

2026-08-07 00:21 UTC · The Hacker News · read the source ↗ #kvm#vm-escape#linux-kernel
  • Engineer — Act: A public PoC is available for this KVM/x86 shadow MMU escape; audit whether nested virtualization is exposed to untrusted guest workloads, then apply the latest Linux kernel patch or disable nested virt for those guests until patched.
  • SOC/IR — Learn: No active exploitation observed (EPSS 0.00, not KEV-listed); the technique expands the mental model for hypervisor-escape detection, but there is no actionable hunt or IOC sweep to run today.
  • Leader — Skip
  • Signals: CVE-2026-64561 — CISA KEV: not listed, EPSS 0.00, public PoC on GitHub
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.