TLDR Tech / News
Security researcher claims they found KVM guest-host escape flaw
Security researcher Paulos Yibelo has reportedly discovered a full virtual machine escape zero-day vulnerability in Linux KVM, allowing a guest root to escape to the host. The flaw was identified through a bug bounty program run by Vercel, which utilizes Firecracker MicroVMs powered by KVM. Because KVM is widely used across major cloud providers and enterprise virtualization platforms, experts emphasize the need for a responsible disclosure process before details emerge.
Read the full story