Nine-year-old Linux kernel flaw Vghost grants root and can enable VM escape
Tencent researchers published working demos for CVE-2026-74580, a vhost bug in Linux kernels 4.11 through 7.2-rc4 that lets local users gain root and, in some setups, lets a guest attack the host.