vulnerability
AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host
HighCVSS 8.8
Summary
A vulnerability in Linux's vhost subsystem allows a local user to gain root access and potentially compromise a host system. Tencent Zhuque Lab released a fix on August 3, and several vendors, including Red Hat, Amazon, and Oracle, have already shipped updated kernels. Until a patched kernel is in place, it’s recommended to restrict access to the vhost device nodes to prevent exploitation.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data