Falha Vghost (CVE-2026-74580) no kernel Linux dá root e permite fugir de VMs. Saiba se o seu servidor está afetado e como atualizar.

A flaw in Linux's vhost subsystem tracked as CVE-2026-74580 and named Vghost allows a local user to read and write kernel memory and gain root access across nearly a decade of kernel versions. The vulnerability affects virtualization setups where an untrusted virtual machine can write to the host's memory and hijack the program running the virtual machine. Tencent Zhuque Lab discovered the bug. The flaw enables privilege escalation from local user to root and allows guest-to-host escape in virtualized environments.

The Reddit post references a security vulnerability designated CVE-2026-74580, nicknamed Vghost, which involves a stale IOTLB cache issue in the Linux kernel's vhost component. According to the post title, this vulnerability enables both universal local privilege escalation (LPE) and guest-to-host escape attacks. The post links to an OpenWall oss-security mailing list entry dated October 14, 2026.

The developer friendly container platform. Choose your infrastructure provider, import your containers, and let Cycle handle the rest.

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

The developer friendly container platform. Choose your infrastructure provider, import your containers, and let Cycle handle the rest.

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

Linux's Vghost flaw lets users with vhost device access gain root and, in specific VM setups, lets guests hijack host QEMU.

A nine-year-old bug in Linux's vhost subsystem, CVE-2026-74580 ("Vghost"), lets a local user who can open /dev/vhost-net or /dev/vhost-vsock get reliable kernel read/write and root on kernels 4.11 through 7.2-rc4. In some virtual IOMMU setups, an untrusted guest VM can also write into the host's QEM

はじめに ひとつずつなら筋の通った変更や小さな不具合が、組み合わさった継ぎ目で穴になる。今回の5本は、この切り口で並べました。Vghost は2つの変更の重なり、FreeType は本家と同梱コピーの時間差、Nix は修理用の機能と別の穴の組み合わせ、Xen は作り直しのときに反転した条件です。\n

CVE-2026-74580, dubbed Vghost, is a Linux kernel vhost subsystem vulnerability discovered with Tencent's Corvus AI multi-agent system. It enables local privilege escalation to root and, in virtualized setups with virtual IOMMU, guest-to-host escape. The claimed two-hour discovery window and a determ

Researchers disclosed Vghost, a high-severity Linux kernel vulnerability that can let local users gain root and, in specific virtualization setups, escape from a guest VM into the host environment.

Curate Feeds | Make Collections | Customize Email Briefs

TL;DR Security researcher Fourie Zhang from the TencentOS Security Team and Corvus AI disclosed CVE-2026-74580, a high-severity memory corruption flaw dubbed Vghost. Furthermore, the researchers publicly released the full technical details and proof-of-concept exploit code for this Linux vhost vulnerability. Tracked with a CVSS score of 8.8, the flaw enables both local root privilege escalation and virtual machine escape across nearly a decade of Linux kernel releases.