🐧 SIGINT // Ubuntu Watch — 2026-10-21
CVE-2026-74580: a CVSS 8.8 memory corruption bug in the kernel vhost subsystem used by QEMU/KVM for accelerated virtio IO. If you run VMs on bare metal, this is a real guest-to-host escalation vector worth patching now, not someday.
🔗 https://matrix.tencent.com/en/2026/10/12/vghost-cve-2026-74580
Tencent Zhuque LabVghost: Beyond the Privilege Boundary · Tencent Zhuque LabCorvus AI found a local privilege-escalation bug in Linux's vhost subsystem.