New Linux Kernel Flaw Gives ARM64 KVM Guests ReadWrite Access to Host Memory

A new flaw in the Linux kernels KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled The bug tracked as CVE202689775 allows a guest to read and write host kernel memory and the researcher who found it says it can be used to escape the guest and run code on the host machine