[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA0iZ560jfw8WMoXXKcsL1kZGy4M5nt8l77rX0mBOXyg":3},{"article":4,"iocs":38,"watch_terms":43,"solutions":44,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"7a30c154-b468-4902-81cb-5cacf8a5888b","New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory","new-linux-kernel-flaw-gives-arm64-kvm-guests-read-write-access-to-host-memory-319e5d","A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled. The bug, tracked as CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.","A critical vulnerability, CVE-2026-89775, has been discovered in the Linux kernel's KVM virtualization code for ARM64 processors. This flaw enables a guest virtual machine with nested virtualization enabled to read and write host kernel memory, potentially leading to a guest escape and execution of code on the host. The vulnerability is present in specific versions of the Linux kernel and has been fixed in newer releases, though distribution-specific patching schedules vary.","Linux kernel flaw CVE-2026-89775 allows ARM64 KVM guests to access host memory.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fnew-linux-kernel-flaw-gives-arm64-kvm.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEhCjDxUEx5QKzby2TlrL6Swi0MV7BdrkgjM6Y5Xby9IU8L9JSdG09pwRemVtrYQtUrvp8QIDduyiDuojZVzZ6GrpzUJIVrThvC4CZ_kd8kckdhBt0MLWDLXD_QwN2wciIA9bqLee51246mEpWx0ZnlcOfXD2U3QWpvmpKZyxx75T7MXK-b8zBMmrouCZJc\u002Fs1600\u002Flinux-kvm.jpg","2026-09-22T11:38:40+00:00","2026-09-22T12:00:29.84739+00:00",8,[17,20,22],{"name":18,"type":19},"ARM64","technology",{"name":21,"type":19},"KVM",{"name":23,"type":24},"Linux kernel","product","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":25,"icon":27,"name":28,"slug":29},null,"Vulnerabilities","vulnerabilities",[31,33],{"category":32},{"id":25,"icon":27,"name":28,"slug":29},{"category":34},{"id":35,"icon":27,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39],{"type":40,"value":41,"context":42},"cve","CVE-2026-89775","Linux kernel KVM vulnerability",[23],{"controls":45,"vendors":133},[46,75,104],{"slug":47,"name":48,"problem":49,"products":50},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[51,59,67],{"vendor_slug":52,"vendor_name":53,"vendor_logo":54,"product_slug":55,"product_name":56,"url":57,"description":58},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":76,"name":77,"problem":78,"products":79},"patch-management","Automated patch management","Known holes get closed in days, not months.",[80,88,96],{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":105,"name":106,"problem":107,"products":108},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":151},"critical-linux-kvm-flaw-allows-guest-vms-to-escape-and-access-host-memory-on-arm64","Critical Linux KVM Flaw Allows Guest VMs to Escape and Access Host Memory on ARM64","A critical flaw in the Linux kernel's KVM virtualization layer for ARM64 processors (CVE-2026-89775) allows a malicious or compromised guest virtual machine to read and write directly to host kernel memory, effectively breaking the isolation boundary that hypervisors depend upon. This type of guest-to-host escape is among the most severe classes of virtualization vulnerabilities, as it can allow an attacker who controls a single tenant VM to compromise the entire host and every other VM running on it. The vulnerability is compounded by the fact that nested virtualization — a feature often enabled for development or cloud-on-cloud scenarios — expands the attack surface significantly. Because distribution-specific patch schedules vary, many production systems may remain exposed long after upstream fixes are available, widening the window of exploitation.",[139,140,141,142,143,144,145,146,147,148,149,150],"CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 SC-39: Process Isolation","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF PR.IP-12: Vulnerability Management Plan","ITIL: Change Management \u002F Emergency Change Procedures","ISO\u002FIEC 27001 Annex A.12.6.1: Management of Technical Vulnerabilities","PCI DSS Requirement 6.3: Security Vulnerabilities Identified and Addressed",{}]