Critical Linux KVM Flaw Lets Attackers Escape Virtual Machines and Gain Root Access

A critical security vulnerability in Linux’s Kernel-based Virtual Machine (KVM) subsystem could allow attackers to break out of affected virtual machines, access the underlying host, and potentially gain root privileges. Tracked as CVE-2026-89775, the flaw affects KVM on ARM64 systems when nested virtualization is enabled. Security researcher Hyunwoo Kim disclosed the issue after an embargo coordinated through the Linux distribution security process expired. The vulnerability…