Cybernews

Massive zero-day: cyber pro breaks out of virtual machine, takes root on KVM host

A KVM zero-day vulnerability could let a guest VM take root on a cloud host, though no exploitation is confirmed.
BleepingComputer

Google now pays $250,000 for KVM zero-day vulnerabilities

Google has launched kvmCTF, a new vulnerability reward program (VRP) first announced in October 2023 to improve the security of the Kernel-based Virtual Machine (KVM) hypervisor that comes with ...
The Hacker News

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

A critical Linux kernel flaw let a guest VM read host memory in Vercel's live sandboxes; host code execution was shown only ...
SDxCentral

Intel and AMD systems at risk from virtualization vulnerability

A long-dormant virtualization vulnerability was discovered that can expose AMD and Intel hosts to compromised virtual machines (VMs). Dubbed Januscape, the flaw affects memory-translation code in ...
The Hacker News

New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A Linux KVM flaw on ARM64 can expose host kernel memory to guests and enable guest-to-host escape when nested virtualization is enabled.
Linux Journal

Google's Kage Project Rethinks Linux Kernel Security With Isolated Device Drivers

Google is exploring a new approach to Linux kernel security that could significantly change how device drivers interact with ...