EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Hacker News·Aug 6·5 min read
Zapscape (CVE-2026-64561)
TL;DR
Zapscape (CVE-2026-64561) is a KVM escape vulnerability that allows a guest in a KVM/x86 environment to execute commands on the host with root privileges. Discovered by Hyunwoo Kim, it poses significant risks to multi-tenant public cloud environments.
✦ Why It Matters
Review your KVM/x86 configurations to mitigate risks associated with the Zapscape vulnerability.
Key Takeaways
- Review and update KVM hypervisor configurations to mitigate risks.
- Implement strict access controls for guest VMs in cloud environments.
- Monitor for unusual activity that may indicate exploitation attempts.
- Establish a regular patching schedule for all virtualization software.
How It Works
The Zapscape vulnerability exploits a flaw in the shadow MMU emulation during the reclamation of shadow pages. By manipulating memory access patterns within the guest VM, an attacker can trigger a use-after-free condition that corrupts the host's shadow page, allowing execution of arbitrary code with root privileges on the host.