A public PoC for the Linux Vghost flaw shows how local users could gain root access or escape virtual machines to compromise hosts.

A public proof of concept for Vghost, a high-severity Linux vhost flaw tracked as CVE-2026-74580, shows how the bug can let a local user gain root access or, in certain virtual machine setups, break out of a guest and affect the host. The issue has a CVSS v3.1 score of 8.8 and is fixed in […] The post PoC Released for Linux Vhost Flaw Enabling Root Privilege Escalation and VM Escape appeared first on Cyber Security News.

  • Hirom ( Hirom@beehaw.org ) English
    1·
    4 days ago

    The first fixed upstream stable releases listed for the affected series are 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.104, 6.18.45, 7.1.9, and 7.2. Administrators should install a fixed kernel or a vendor backport and reboot into it.

    The Linux 7.1.9 release was announced on Wed, 19 Aug 2026. So this was fixed about 2 months ago. This vulnerability shouldn’t be an issue for systems that are regularily updated, or disconnected from the network.