New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory

A newly discovered vulnerability in the Linux kernel’s KVM virtualization code for ARM64 processors allows guest virtual machines to read and write host kernel memory. Tracked as CVE-2026-89775, the bug occurs when nested virtualization is enabled and can be leveraged by attackers to escape the guest environment and execute code on the underlying host system.