AI-Found Linux Kernel Flaw Gives Local Users Root, and Can Break a Guest Out to the Host

A critical Linux kernel vulnerability named Vghost allows local users to read/write kernel memory and gain root access across nearly a decade of versions. It also enables a virtual machine guest to escape to the host under certain virtualization setups. Tencent Zhuque Lab discovered and fixed the flaw, publishing detailed analysis and demos in October 2026.