Vghost

Security researchers have disclosed Vghost, CVE-2026-74580, a vulnerability in the Linux kernel's vhost component that reportedly existed for roughly nine years. The flaw allows a local attacker to gain root privileges and potentially escape from a virtual machine to the host, a severity combination that makes it significant for cloud and hosting providers running multi-tenant infrastructure. Discussion is focused on the long exposure window and patching implications.