New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts Source: The Hacker News Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-6 Read original
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts Source: The Hacker News Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-6 Read original
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts Source: The Hacker News Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-6 Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch Source: The Hacker News A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel builds. The vulnerability, tracked as CVE-2026-64531 (CVSS scor Read original
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer Source: The Hacker News Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has been ongoing s Read original