Virtualization
Xen Orchestra VSA-2026-062: Empty-Object Cookie Auth Bypass Exploited to Take Over XCP-ng Pools
Vates warns that a critical Xen Orchestra auth bypass, triggered by a single crafted cookie, is being exploited to gain admin access and root on managed XCP-ng hosts.
PwnEscape (CVE-2026-99999): Linux Kernel Checksum Bug Lets KVM Guests Read and Corrupt Host Memory
PwnEscape, a Linux IPv4 checksum-validation flaw (CVE-2026-99999), lets a malicious guest leak host memory on KVM hosts using virtio-net/TAP networking; a leak was demonstrated against Vercel's production sandboxes.
CVE-2026-89775: KVM/arm64 Nested-Virtualization Bug Gives Guests Read-Write Access to Host Kernel Memory
A type-truncation bug in KVM/arm64's stage-1 page-table walk lets a guest keep a writable mapping to a freed host kernel page, enabling guest-to-host escape on ARM64 hosts with nested virtualization enabled.