CVE-2026-64561

CVE-2026-64561 — Zapscape:KVM/x86 shadow MMU UAF, guest का host root तक पलायन HackSpeak वितरण मिरर। यह रिपॉजिटरी शोधकर्ता Hyunwoo Kim @v4bel द्वारा सार्वजनिक किए गए पूर्ण PoC + तकनीकी दस्तावेज़ का वितरण मिरर है , कोड और दस्तावेज़ अपस्ट्रीम के अनुरूप हैं। ⚠️ अपस्ट्रीम में LICENSE संलग्न नहीं है :...

hyperv_local_dos_poc

Hyper-V DoS PoC। यह Visual Studio 2019 ड्राइवर प्रोजेक्ट की कोड फ़ाइलें हैं। 1. ड्राइवर को कंपाइल करें। 2. अतिथि OS के लिए नेस्टेड वर्चुअलाइज़ेशन सक्षम करने के लिए कमांड का उपयोग करें: root@kitploit: Set-VMProcessor -VMName -ExposeVirtualizationExtensions $true 3. अतिथि OS के अंदर ड्राइवर चलाएँ।...

Januscape

Januscape: KVM/x86 में अतिथि-से-होस्ट एस्केप सारांश यह दस्तावेज़ Januscape CVE-2026-53359 कमजोरी का वर्णन करता है जिसे Hyunwoo Kim @v4bel ने खोजा और रिपोर्ट किया। यह एक KVM एस्केप कमजोरी है जो KVM/x86 वातावरण में अतिथि को होस्ट से बचने देती है। सार्वजनिक ज्ञान के अनुसार, यह पहला अतिथि-से-होस्ट शो...

CVE-2021-3656-Demo

CVE-2021-3656: यह समस्या virtext VMCB फ़ील्ड के सत्यापन की कमी के कारण होती है और एक दुर्भावनापूर्ण L1 अतिथि को L2 अतिथि के लिए VMLOAD/VMSAVE इंटरसेप्ट और VLS वर्चुअल VMLOAD/VMSAVE दोनों को अक्षम करने की अनुमति देती है। इन परिस्थितियों में, L2 अतिथि बिना रुकावट के VMLOAD/VMSAVE चला पाता है, और इस...

CVE-2026-64562

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nested virtualization nVMX feature. This vulnerability occurs because the shadow Virtual Machine Control Structure VMCS is freed prematurely while still being referenced. Due to asynchronous operations, a virtual CPU vCPU mig...

Zapscape

KVM एस्केप त्रयी ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: KVM/x86 में गेस्ट-से-होस्ट एस्केप सार यह दस्तावेज़ Zapscape CVE-2026-64561 भेद्यता का वर्णन करता है, जिसे Hyunwoo Kim @v4bel द्वारा खोजा और रिपोर्ट किया गया था। यह एक KVM एस्केप...

KVM-Januscape

Correctif à chaud KVM-XJ dumptool.py automatise la recherche des offsets ; pour son utilisation, lisez le code. Aperçu de la vulnérabilité CVE-2026-53359 Januscape est une vulnérabilité use-after-free UAF dans le shadow MMU de KVM du noyau Linux. Temps de latence : 16 ans août 2010 à juillet 2026...

CVE-2026-74516

A flaw was found in KVM Kernel-based Virtual Machine. When the Advanced Virtual Interrupt Controller AVIC is inhibited while a nested guest L2 is active, KVM fails to properly update x2APIC MSR intercepts for the primary guest L1. This allows the L1 guest to read the host's APIC state, send...

CVE-2026-72279

A flaw was found in the KVM Kernel-based Virtual Machine component of the Linux kernel. KVM on arm64 architectures incorrectly maps the L1 Virtual Nested Control Register VNCR into the host stage-1, failing to respect read-only memory regions. This could allow a malicious guest to write to a...

CVE-2026-72280

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architectures. A guest operating system, when operating in a nested virtualization environment, could trigger a hypervisor panic hyppanic by writing to the ZCREL2 system register alias. This issue leads to a denial ...

Linux Distros Unpatched Vulnerability : CVE-2026-72280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: nv: Drop bogus WARN for write to ZCREL2 It is entirely possible for a guest to write to the ZCREL2 sysreg alias while in a nested context, as it is...

Linux Distros Unpatched Vulnerability : CVE-2026-72287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into normal checks Move the off-by-default consistency check for vmcs12.tprthreshold vs. the virtual AP...

UBUNTU-CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

CVE-2026-74516

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

EUVD-2026-59709

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

CVE-2026-74516

The CVE-2026-74516 issue affects the Linux kernel (KVM/SMV) where, if AVIC is inhibited while L2 is active, the host may run L1 with AVIC disabled and with x2APIC MSR intercepts also disabled. This allows L1 to access the host APIC state, trigger arbitrary interrupts, modify task priority, and co...

CVE-2026-74516 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

CVE-2026-74516 KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Always update x2APIC MSR intercepts for L1 when AVIC is deactivated, even if L2 is active and KVM is using a separate MSR bitmap to run L2. If AVIC is...

UBUNTU-CVE-2026-72287

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the off-by-default consistency check for vmcs12.tprthreshold vs. the virtual APIC vTPR into the "normal" controls checks, as waiting until KVM has...

CVE-2026-72287

In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Move the off-by-default consistency check for vmcs12.tprthreshold vs. the virtual APIC vTPR into the "normal" controls checks, as waiting until KVM has...