A critical flaw in Linux's vhost subsystem, tracked as CVE-2026-74580 and named Vghost, allows a local user to read and write kernel memory, granting them root privileges. This vulnerability affects nearly a decade of Linux kernel versions.
In specific virtualization configurations, Vghost enables an untrusted virtual machine to write to the host's memory. It can also hijack the program responsible for running the virtual machine, potentially leading to host system compromise. Tencent Zhuque Lab discovered the flaw.
Sources and references
Original report
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00044AAH
Cite this
APA
Interestana AI Editorial. (2026, October 14). Linux Kernel Flaw Grants Root Access, Escapes Virtualization. Interestana. https://interestana.com/articles/ai-found-linux-kernel-flaw-gives-local-users-root-and-can-break-a-guest-out-to-the-host-00044aah
MLA
“Linux Kernel Flaw Grants Root Access, Escapes Virtualization.” Interestana, 14 Oct. 2026, interestana.com/articles/ai-found-linux-kernel-flaw-gives-local-users-root-and-can-break-a-guest-out-to-the-host-00044aah.
Chicago
Interestana AI Editorial. “Linux Kernel Flaw Grants Root Access, Escapes Virtualization.” Interestana, October 14, 2026. https://interestana.com/articles/ai-found-linux-kernel-flaw-gives-local-users-root-and-can-break-a-guest-out-to-the-host-00044aah.
BibTeX
@misc{interestana_00044aah,
author = {{Interestana AI Editorial}},
title = {{Linux Kernel Flaw Grants Root Access, Escapes Virtualization}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/ai-found-linux-kernel-flaw-gives-local-users-root-and-can-break-a-guest-out-to-the-host-00044aah},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html}
}Credit the source
Original reporting: The Hacker News, “AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host”, https://thehackernews.com/2026/10/ai-found-linux-kernel-flaw-gives-local.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe