A new Linux kernel vulnerability tracked as CVE-2026-64561, dubbed Zapscape, permits attackers with kernel-level privileges inside a Level 1 guest virtual machine to break KVM isolation and run code directly on the host system.

The flaw resides in KVM/x86's shadow memory management unit, which handles shadow page tables used by the hypervisor to track guest memory access. The vulnerability emerges when nested virtualization is exposed to untrusted guest environments, creating an escape path from the VM boundary to the underlying host kernel.

An attacker gaining kernel access within a guest VM can exploit flaws in shadow MMU handling to manipulate page table entries or memory mappings. This manipulation bypasses KVM's isolation mechanisms and grants direct code execution on the host Linux kernel with full host privileges.

The risk profile centers on cloud environments and multi-tenant systems running nested KVM configurations. Organizations using platforms like Red Hat Enterprise Linux, Ubuntu, or other distributions with KVM enabled face exposure if they permit untrusted workloads within guest VMs or run nested virtualization stacks.

The attack requires two prerequisites. First, an attacker must obtain kernel-level code execution inside the L1 guest. Second, the environment must have nested virtualization enabled and accessible to untrusted guests. Standard configurations isolating guests from each other provide some mitigation, but organizations running development clusters or public cloud offerings permitting nested VMs remain at higher risk.

Remediation involves patching the Linux kernel once vendor updates become available. In the interim, administrators should disable nested virtualization if unnecessary for operational requirements. Kernel parameter adjustments disabling KVM shadow paging can also reduce exposure, though performance overhead applies.

The vulnerability underscores ongoing security challenges in hypervisor implementations. Even with decades of KVM maturity, complex memory management logic continues yielding escape vectors. Organizations should priorit