Impacted if
Not known yet — the vendor's record and the NVD are being read.
First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.
Coverage
-
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
The Hacker News
Cybersecurity
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's…