<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-23T01:32:31.770248+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ce7929e-bfed-4a63-a8f3-c51b7cfc13b1/export</id>
    <title>0ce7929e-bfed-4a63-a8f3-c51b7cfc13b1</title>
    <updated>2026-09-23T01:32:31.792662+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0ce7929e-bfed-4a63-a8f3-c51b7cfc13b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "content": "A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled.\n\nThe bug, tracked as&amp;nbsp;CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.", "creation_timestamp": "2026-09-23T01:00:43.623940Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ce7929e-bfed-4a63-a8f3-c51b7cfc13b1/export"/>
    <published>2026-09-23T01:00:43.623940+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8/export</id>
    <title>47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8</title>
    <updated>2026-09-23T01:32:31.794005+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thibaud.dev/post/3mw4p3epc5s2p", "content": "Faille critique sur le noyau Linux (CVE-2026-89775) : une vuln\u00e9rabilit\u00e9 KVM sur ARM64 permet \u00e0 une VM d'acc\u00e9der en lecture/\u00e9criture \u00e0 la m\u00e9moire de l'h\u00f4te.\n\nEscape de VM possible, mais uniquement si la virtualisation imbriqu\u00e9e est activ\u00e9e.\n\ngo.thibaud.dev/z0Q7\n\n#Linux #Security #DevOps", "creation_timestamp": "2026-09-22T16:57:24.208611Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8/export"/>
    <published>2026-09-22T16:57:24.208611+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3206e95-968f-4873-9c46-0c806bcf8c38/export</id>
    <title>f3206e95-968f-4873-9c46-0c806bcf8c38</title>
    <updated>2026-09-23T01:32:31.794096+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3206e95-968f-4873-9c46-0c806bcf8c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mw4n5vb2c32n", "content": "Linux ARM64 KVM Flaw Enables Guest-to-Host\u00a0Escape\n\nA new Linux kernel vulnerability, CVE-2026-89775, allows ARM64 KVM guests to read and write host kernel memory if nested virtualization is enabled.", "creation_timestamp": "2026-09-22T16:23:01.435557Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3206e95-968f-4873-9c46-0c806bcf8c38/export"/>
    <published>2026-09-22T16:23:01.435557+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce25b712-144d-4e28-984e-d94e04ae1289/export</id>
    <title>ce25b712-144d-4e28-984e-d94e04ae1289</title>
    <updated>2026-09-23T01:32:31.794173+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce25b712-144d-4e28-984e-d94e04ae1289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "content": "A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled.\n\nThe bug, tracked as&amp;nbsp;CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.", "creation_timestamp": "2026-09-22T13:00:41.941154Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce25b712-144d-4e28-984e-d94e04ae1289/export"/>
    <published>2026-09-22T13:00:41.941154+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bcab83a5-18fd-41d8-a1e5-3c0ccc252446/export</id>
    <title>bcab83a5-18fd-41d8-a1e5-3c0ccc252446</title>
    <updated>2026-09-23T01:32:31.794240+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bcab83a5-18fd-41d8-a1e5-3c0ccc252446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw47j66y442q", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:18:46.933129Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bcab83a5-18fd-41d8-a1e5-3c0ccc252446/export"/>
    <published>2026-09-22T12:18:46.933129+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4df0a1eb-2ec9-4686-bdf3-49e116d389e5/export</id>
    <title>4df0a1eb-2ec9-4686-bdf3-49e116d389e5</title>
    <updated>2026-09-23T01:32:31.794303+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4df0a1eb-2ec9-4686-bdf3-49e116d389e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw47ek4zvk2g", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:16:12.972914Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4df0a1eb-2ec9-4686-bdf3-49e116d389e5/export"/>
    <published>2026-09-22T12:16:12.972914+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bea28723-efc6-45df-9e5c-df97a347c67b/export</id>
    <title>bea28723-efc6-45df-9e5c-df97a347c67b</title>
    <updated>2026-09-23T01:32:31.794365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bea28723-efc6-45df-9e5c-df97a347c67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw472sbtgj2w", "content": "CVE-2026-89775: ARM64 Guest Gains Host Memory Access via KVM TLB Bug", "creation_timestamp": "2026-09-22T12:10:44.459929Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bea28723-efc6-45df-9e5c-df97a347c67b/export"/>
    <published>2026-09-22T12:10:44.459929+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a506891c-e5c9-4299-87d9-14df767f00e4/export</id>
    <title>a506891c-e5c9-4299-87d9-14df767f00e4</title>
    <updated>2026-09-23T01:32:31.794425+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a506891c-e5c9-4299-87d9-14df767f00e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mw464c57o72s", "content": "ARM64 KVM nested-virtual hosts vulnerable to CVE-2026-89775: guest VMs can escape and write host memory. Update kernels now. #Security #Linux #ARM64 #KVM #KernelVulnerability https://thedailytechfeed.com/critical-linux-vulnerability-lets-arm64-kvm-guests-escape-to-host-memory/", "creation_timestamp": "2026-09-22T11:53:41.494957Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a506891c-e5c9-4299-87d9-14df767f00e4/export"/>
    <published>2026-09-22T11:53:41.494957+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/efaddc37-f354-45b1-895c-f936df3f9f62/export</id>
    <title>efaddc37-f354-45b1-895c-f936df3f9f62</title>
    <updated>2026-09-23T01:32:31.794489+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "efaddc37-f354-45b1-895c-f936df3f9f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvr3rvc5l22z", "content": "KVM Guest Escape: Critical CVE-2026-89775 Lets Attackers Break Out of VMs\uff08KVM\u306bCritical\u8106\u5f31\u6027\u3001\u4eee\u60f3\u30de\u30b7\u30f3\u304b\u3089\u30db\u30b9\u30c8\u3078\u306e\u8131\u51fa\u304c\u53ef\u80fd\uff09 #SecurityOnline (Sep 17)\n\nsecurityonline.info/kvm-guest-es...", "creation_timestamp": "2026-09-18T02:12:47.451634Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/efaddc37-f354-45b1-895c-f936df3f9f62/export"/>
    <published>2026-09-18T02:12:47.451634+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b7f1af0-b7bb-448f-8a47-5921d56e8a81/export</id>
    <title>7b7f1af0-b7bb-448f-8a47-5921d56e8a81</title>
    <updated>2026-09-23T01:32:31.794556+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b7f1af0-b7bb-448f-8a47-5921d56e8a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvomusyx742o", "content": "A critical KVM guest escape (CVE-2026-89775) enables an LPE to gain root on Linux hosts. Patch this KVM guest escape vulnerability now.\n\n#KVM #LinuxKernel #CVE202689775 #Cybersecurity #InfoSec", "creation_timestamp": "2026-09-17T02:40:40.085130Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b7f1af0-b7bb-448f-8a47-5921d56e8a81/export"/>
    <published>2026-09-17T02:40:40.085130+00:00</published>
  </entry>
</feed>
