New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Researcher Hyunwoo Kim disclosed Zapscape, tracked as CVE-2026-64561, a KVM/x86 shadow-MMU flaw in which a stale-root check ordering error can lead to a use-after-free and let an attacker with L1 guest kernel privileges escape KVM isolation and run...