2026-08-06 16:46 UTC
Another KVM guest escape to root (read LPE) just got disclosed https://zapscape.io
I'll log my findings in replies
#linux #lpe #zapscape
Replies (3)
-
@histrio@fosstodon.org 2026-08-06 16:52
The bug had existed for 6 years and was fixed in the mainline only very recently
-
@histrio@fosstodon.org 2026-08-06 16:56
Judging just by code the specter of affected distros quite vast: entire EL8/9/10 family (mostly fixed by vendors), debian 11/12/13, ubuntu jammy/noble
-
@histrio@fosstodon.org 2026-08-06 17:02
There is a PoC, but not it's weaponized only for one specific environment/kernel