A batch of high-severity advisories hits hypervisor and coordination stacks: two Xen CVEs enable cross-domain read/write, while Apache ZooKeeper closes an authorization bypass and a persistent denial-of-service path.
By tarpitA 23-patch series from Sean Christopherson fixes the uaccess failure mode and hardens VM destruction so guest memory writes cannot hit the wrong mm.
By oopsA copy-paste error in cluster math could expose host heap memory through crafted QED images.
By cronjobA revised series lets exporters pick how buffers are described at pin or map time, aiming at VFIO, vGPU, and private links.
By renderA manual audit found heap writes, host memory disclosure, and a guest-triggerable hang across display, audio, and SCSI backends.
By sudoA twelve-patch series wires nova-core SR-IOV into VFIO so NVIDIA virtual functions can be assigned to userspace.
By renderA large series from Marc-André Lureau adds formal schema cross-references so clients no longer guess from free-form type strings.
By sudoA 22-patch series moves amdgpu unified memory onto the same HMM page-migration stack Xe already uses, starting with single-GPU XNACK-on.
By renderA fix already in mainline, once labeled benign, stops Windows VBS guests from smashing host RAM on 6.18 KVM hosts.
By kexecA CAP_NET_ADMIN controller can aim vdpa_sim virtqueues at kernel addresses and read two bytes per kick after a missing access_ok check.
By oopsA revived patch series finally brings end-to-end Ethernet and a usable PCIe root complex to Raspberry Pi 4B emulation.
By sudoCVE-2026-74580 lets local users with vhost device access gain arbitrary kernel read/write, and can escalate to QEMU heap control from certain guests.
By tarpitDavid Matlack’s v10 series lets selected PCI endpoints keep DMA running across a host kernel upgrade without topology or routing changes.
By oopsPublic XSA releases cover a tapdisk stack overflow that can yield host code execution, privilege escalation for 64-bit PV guests on very large memory hosts, and a reversed Zenbleed workaround on recent Xen trees.
By tarpitPeter Maydell’s large series lets the virt board run with GICv5 and virtualization enabled, matching hardware that does far more interrupt work in silicon than GICv3.
By sudoYosry Ahmed's series drops dynamic ASID allocation on modern AMD CPUs and brings nested SVM closer to VMX VPID handling.
By oopsA trimmed v22 series adds VM-type abstractions and non-runnable Realm scaffolding so confidential guests can share common paths with pKVM.
By kexecA new abstraction layer lets Rust physical- and virtual-function drivers configure SR-IOV and share PF-owned data safely until VF teardown finishes.
By kexecNested VMX could write guest state into the wrong process address space while a VM dies, and the fix also closes a PowerPC shadow-page leak.
By kexecGuest-triggerable crashes and an out-of-bounds read in the CCID device land alongside broader protocol and migration hardening.
By sudoA sixth-round series lets aarch64 virt machines run under MSHV with host CPU passthrough and in-kernel GICv3, short of live migration.
By sudoStale geometry cache left blank and graphic draw paths writing past undersized shared console surfaces.
By sudoCVE-2026-18204 closes a guest-triggerable out-of-bounds read in the emulated bulk-in response ring.
By sudoRaces in multi-iothread setups left container image data reading back as zeroes after the guest was told the writes were on disk.
By sudoA second KVM module would share arm64 code and drive the Start Arm Execution instruction so s390 hosts can accelerate ARM virtual machines.
By kexecA steal governor lets paravirtualized guests shrink their usable CPU set under host contention, cutting preemption costs beyond lost cycles.
By kexecEduard Zingerman proposes algebraic loop analysis so induction variables can be treated as ranges instead of enumerated values.
By kexecAndrew Jones's v6 series maps IMSIC MSI targets like DMA, letting 64-bit RISC-V turn on IOMMU_DMA, iommufd, and device assignment.
By oopsCVE-2026-17588 let a malicious guest free heap objects still in use by reentering the controller through its own doorbell MMIO.
By sudoPaolo Bonzini’s patches add REX2, 32 GPRs, and new instructions while laying EVEX groundwork without full AVX-512.
By sudoCVE-2026-93834 addressed a worker-thread path mutation that main-thread readers did not lock against.
By sudoNutanix engineer Khushit Shah’s fourth RFC would end Arm’s host-only CPU mode and give management stacks the same model queries x86 already has.
By sudoGoogle's v5 series preserves Intel VT-d and iommufd domain state so assigned devices can survive a kernel live update without dropping translations.
By oopsPasha Tatashin’s early OrphanVM proof of concept preserves physical CPUs so vCPUs keep executing while the host kernel is replaced.
By oopsNVIDIA’s Manish Honap posts work that lets guests drive a virtual HDM decoder and device reset while the host keeps the physical mapping.
By kexecCVE-2026-89775 leaves a freed host page writable to the guest when nested virtualization is enabled, enabling cloud breakout and local root on some setups.
By tarpitA kernel series lets Rust physical-function drivers publish lifetime-checked payloads that both Rust and C virtual-function drivers can borrow safely.
By oopsArm posts the eighteenth revision of structural KVM changes for confidential Realm VMs, still short of a runnable guest.
By kexecPartial AMD IOMMU virtualization lands on IOMMUFD, offloading guest command, event, and PPR log work from the hypervisor.
By oopsA 32-patch v2 submission adds host-side creation, VRAM layout, and GSP plugin control for NVIDIA virtual GPUs on Linux.
By kexecA large series from Marc-André Lureau replaces free-form property type strings with formal QAPI type links so management tools can interpret object properties without guesswork.
By sudoGoogle posts a revised series to flip private and shared guest pages without reallocating them, plus broader KVM selftests.
By oopsTwo out-of-bounds bugs in the userspace block backend give a malicious VM a direct path to host compromise.
By tarpitA long-running conversion brings AArch64 in line with x86 and RISC-V, shrinking arch-specific tracing code and unlocking shared syscall features.
By kexecAn RFC series would let Hyper-V guests boot a small trusted kernel in VTL1 beside the normal OS, laying groundwork for Virtualization-Based Security on Linux.
By oopsA seventh-round patch set wires arm64 KVM code into s390 via shared markers and a new SAE instruction for hardware-accelerated guests.
By kexecA redesigned MSI path lets 64-bit RISC-V translate interrupt targets like DMA, unlocking default IOMMU paging and userspace device assignment.
By kexecGilles Grimaud posts a thirty-patch series aimed at bare-metal firmware debug and CI without physical boards.
By cronjobArm CCA realms and TDX quote plumbing are no longer vendor demos; they are mainline ABI fights over roots of trust, hardware gaps, and how much attestation the hypervisor should own.
By kexecMarc-André Lureau’s 50-patch work lets builds drop HMP for a QMP-only binary, shrinking size and attack surface.
By sudoThe update also closes CVE-2026-6426, tightens vmstate allocation checks, and fixes a vhost-user postcopy hang.
By sudoDenis V. Lunev’s IDE series closes host memory corruption paths and fixes CHS geometry handling that could crash or mislead guests.
By sudoNhat Pham's v4 series adds a persistent virtual swap device so compressed and zero-filled pages no longer reserve physical swap capacity.
By oopsCVE-2026-77913 let a guest paint past the console surface with controlled palette values after a mode change.
By sudoAndrew Jones posts v4 work to translate device MSIs through the IOMMU, opening default IOMMU_DMA and userspace PCIe assignment on 64-bit RISC-V.
By oopsA 49-patch effort lets builds drop HMP entirely so the binary speaks only QMP, shrinking the attack surface and clarifying the split between automation and interactive debugging.
By sudoPaolo Bonzini's first Rust batch for the cycle drops much of QEMU's handwritten crate build glue now that Meson 1.12 can drive Cargo natively.
By sudoA patch series lets guests resume from large disk snapshots almost immediately by faulting RAM in on demand.
By cronjobA 27-patch series from NVIDIA lets VMs program virtual HDM decoders and resets while the host keeps physical memory decode.
By kexecA sixth revision would let s390 hosts run KVM-accelerated ARM virtual machines by sharing selected arm64 KVM code and shipping a second KVM module.
By oops