THREATOPS

THREAT OPS › Threat News › Zapscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-64561)

Zapscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-64561)

medoss_secPublished 2026-08-06

Posted by Hyunwoo Kim on Aug 06Hi, The embargo agreed with the linux-distros () vs openwall org maintainers has expired, so I am posting this report. This is a report on "Zapscape (CVE-2026-64561)", a KVM escape vulnerability that lets a guest escape to the host in KVM/x86, that is, on both Intel and AMD hosts. Zapscape is a

Indicators of compromise

CVE-2026-64561cve

Original source: https://seclists.org/oss-sec/2026/q3/460

Same event, other sources

[NVD] CVE-2026-64561 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If renvd · 2026-08-04