Critical Zapscape Vulnerability in Linux KVM: What You Need to Know
In August 2026, a critical vulnerability known as 'Zapscape' (CVE-2026-64561) was disclosed in the Linux Kernel-based Virtual Machine (KVM). This flaw allows attackers with kernel privileges inside an L1 guest virtual machine to escape KVM isolation and execute code on the host system. The vulnerability resides in KVM/x86's shadow memory management unit (MMU), affecting nested virtualization environments where untrusted guests are permitted. Security researcher Hyunwoo Kim demonstrated that exploiting this flaw enables commands to be run on the host with root privileges. Administrators are urged to update to patched kernel versions to mitigate this risk. The disclosure of Zapscape underscores the ongoing challenges in securing nested virtualization environments. As cloud providers and enterprises increasingly rely on such configurations, the potential for similar vulnerabilities highlights the need for vigilant security practices and timely patch management to prevent unauthorized access and maintain system integrity.
Kill Chain
