Vghost: A Nine-Year-Old Linux vhost Bug Gives Local Users Root and Lets Guests Hit the Host
No Comments on Vghost: A Nine-Year-Old Linux vhost Bug Gives Local Users Root and Lets Guests Hit the Host
CVE-2026-74580, nicknamed Vghost, is a stale-cache bug in Linux's vhost subsystem that gives local users root and, in one setup, lets a guest VM attack the host's QEMU process. Here is what's reported, who is exposed, and what to do now.
GitLab Warns of a Max-Severity Code Execution Flaw in Its CI/CD Regex Compiler
GitLab is urging users to patch a maximum-severity flaw in its CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code. Here's what's known, what isn't, and what I'd do right now if I ran a GitLab instance.