Loading feed…
Phoronix0 Hot0 comments2 min read
Zapscape Is The Latest Linux Vulnerability For KVM Guest-To-Host Escape, LPE
Zapscape is a newly disclosed KVM guest-to-host escape vulnerability affecting Linux kernel x86/x86_64 code paths from mid-2020 through July 21 when it was patched. It exploits a use-after-free bug in the shadow MMU emulation code of KVM. An attacker with guest access can panic the host kernel (DoS) or execute code as root on the host (RCE), compromising all VMs on the same physical machine. On distributions like RHEL where /dev/kvm is world-writable (0666), it can also be used as a local privilege escalation (LPE) by unprivileged users. A public proof-of-concept (non-weaponized) has been released alongside the disclosure.
Source: https://www.phoronix.com/news/Linux-Zapscape-Vulnerability. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
