search
vhost
Trends
- 1Vghost: nine-year-old Linux vhost bug allows root and VM escapeโVghost: A 9-year-old Linux vhost bug enabling local root and VM escape
Security researchers have disclosed Vghost, CVE-2026-74580, a vulnerability in the Linux kernel's vhost component that reportedly existed for roughly nine years. The flaw allows a local attacker to gain root privileges and potentially escape from a virtual machine to the host, a severity combination that makes it significant for cloud and hosting providers running multi-tenant infrastructure. Discussion is focused on the long exposure window and patching implications.
- 2Medium-severity flaw found in DPDK vhost-cryptoโ๐จ EUVD-2026-101513 ๐ Score: 6.5/10 (CVSS v3.1) ๐ Published: 2026-10-14 | Updated: 2026-10-15 ๐ A flaw was found in DPDK
A vulnerability tracked as EUVD-2026-101515, scored 6.5 out of 10 under CVSS v3.1, was published on 14 October and updated the following day. The flaw sits in DPDK's lib/vhost vhost-crypto component: an integer overflow in chain length checks, combined with missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto service. Administrators running DPDK-based virtualised crypto workloads are expected to review patch guidance.
- 3Exploit code released for Linux vhost vulnerability CVE-2026-74580โผTechnical details and PoC exploit code for CVE-2026-74580 (Vghost), an 8.8-severity Linux vhost vulnerability allowing r
Technical details and proof-of-concept exploit code for CVE-2026-74580, nicknamed Vghost, are now public. The flaw, rated 8.8 in severity, affects the Linux kernel's vhost component and can be exploited for root-level privilege escalation and escape from a virtual machine. Security researchers are warning that with working exploit code available, Linux administrators and cloud providers should patch vulnerable systems promptly and review their virtualization defenses.