Urgent.News

the world's headlines, one feed

Tech

Zapscape Is The Latest Linux Vulnerability For KVM Guest-To-Host Escape, LPE

Made public earlier today is Zapscape as a guest-to-host escape vulnerability affecting the Linux KVM x86 code for the past six years. This 2020 kernel change to KVM x86 can also be used as a local privilege escalation (LPE) exploit too where /dev/kvm is world-writable on some Linux distributions like RHEL...

We haven't written up this one. Phoronix has the full story — the link below goes straight to it.

Read the original at phoronix.com →

More in Tech