AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

First reported by The Hacker News at · Updated · 2 sources

A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine.

Covered by 2 publishers within 6 hours of the first report.

Summary from The Hacker News.

Reporting2

The Hacker News AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host · info@thehackernews.com (The Hacker News)
Cyber Security News PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape · Abinaya