AI-Discovered Linux Kernel Flaw Gives Local Users Root and Enables VM Escapes

A vulnerability in the Linux kernel’s vhost subsystem, tracked as CVE-2026-74580 and dubbed Vghost, impacts nearly a decade of kernel versions. The flaw allows local users to arbitrarily read and write kernel memory to escalate privileges to root. In specific virtualization setups, it also enables an untrusted virtual machine to break out and compromise the underlying host. Administrators should apply the latest kernel patches immediately.