Linux Kernel Flaw Grants ARM64 KVM Guests Host Memory Access

A significant vulnerability has been identified within the Linux kernel's Kernel-based Virtual Machine (KVM) virtualization code, specifically impacting ARM64 processors. This flaw, officially designated as CVE-2026-89775, creates a security risk by exposing a freed piece of host memory to a guest virtual machine. The vulnerability is present on hosts that have nested virtualization enabled, a configuration where one virtual machine runs inside another.

The core issue lies in how KVM handles memory management for ARM64 guests. When memory is freed by the host, a race condition or improper handling can leave a residual pointer or data accessible to the guest. This allows a malicious or compromised guest operating system to not only read sensitive data residing in the host's kernel memory but also to write to it. Such unauthorized access to host memory is a severe security breach, as it bypasses the isolation typically enforced between virtual machines and their underlying host system.

The researcher who discovered CVE-2026-89775 has stated that this vulnerability can be exploited to achieve a guest-to-host escape. This means an attacker could leverage the flaw to break out of the confines of the virtual machine and execute arbitrary code directly on the host machine. The implications of such an escape are far-reaching, potentially allowing an attacker to gain complete control over the host system, access all other virtual machines running on it, and compromise the entire infrastructure.

Nested virtualization, while offering flexibility for certain use cases like running hypervisors within virtual machines or for testing purposes, introduces additional complexity and potential attack surfaces. The KVM subsystem is a crucial component of Linux for enabling hardware-assisted virtualization, allowing multiple operating systems to run concurrently on a single physical machine. The vulnerability highlights the ongoing challenges in securing complex software stacks like operating system kernels and virtualization technologies, especially as hardware architectures and features like nested virtualization evolve. Users running ARM64 systems with KVM and nested virtualization enabled are advised to monitor for security advisories and apply patches as soon as they become available from their Linux distribution providers to mitigate the risk posed by CVE-2026-89775.