<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-26T18:02:30.562535+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8/export</id>
    <title>47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8</title>
    <updated>2026-09-26T18:02:30.588337+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thibaud.dev/post/3mw4p3epc5s2p", "content": "Faille critique sur le noyau Linux (CVE-2026-89775) : une vuln\u00e9rabilit\u00e9 KVM sur ARM64 permet \u00e0 une VM d'acc\u00e9der en lecture/\u00e9criture \u00e0 la m\u00e9moire de l'h\u00f4te.\n\nEscape de VM possible, mais uniquement si la virtualisation imbriqu\u00e9e est activ\u00e9e.\n\ngo.thibaud.dev/z0Q7\n\n#Linux #Security #DevOps", "creation_timestamp": "2026-09-22T16:57:24.208611Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/47ba7f8d-cf2c-4464-92bd-9b27bb8dbab8/export"/>
    <published>2026-09-22T16:57:24.208611+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3206e95-968f-4873-9c46-0c806bcf8c38/export</id>
    <title>f3206e95-968f-4873-9c46-0c806bcf8c38</title>
    <updated>2026-09-26T18:02:30.592307+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3206e95-968f-4873-9c46-0c806bcf8c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mw4n5vb2c32n", "content": "Linux ARM64 KVM Flaw Enables Guest-to-Host\u00a0Escape\n\nA new Linux kernel vulnerability, CVE-2026-89775, allows ARM64 KVM guests to read and write host kernel memory if nested virtualization is enabled.", "creation_timestamp": "2026-09-22T16:23:01.435557Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3206e95-968f-4873-9c46-0c806bcf8c38/export"/>
    <published>2026-09-22T16:23:01.435557+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ce25b712-144d-4e28-984e-d94e04ae1289/export</id>
    <title>ce25b712-144d-4e28-984e-d94e04ae1289</title>
    <updated>2026-09-26T18:02:30.592409+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ce25b712-144d-4e28-984e-d94e04ae1289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "content": "A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can leave a freed piece of host memory exposed to a guest virtual machine on hosts with nested virtualization enabled.\n\nThe bug, tracked as&amp;nbsp;CVE-2026-89775, allows a guest to read and write host kernel memory, and the researcher who found it says it can be used to escape the guest and run code on the host machine.", "creation_timestamp": "2026-09-22T13:00:41.941154Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ce25b712-144d-4e28-984e-d94e04ae1289/export"/>
    <published>2026-09-22T13:00:41.941154+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7531a5a7-d36a-468e-911f-e242302db613/export</id>
    <title>7531a5a7-d36a-468e-911f-e242302db613</title>
    <updated>2026-09-26T18:02:30.592486+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7531a5a7-d36a-468e-911f-e242302db613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "published-proof-of-concept", "source": "Telegram/fI0ZbmLncz2xmiv5ONTEfe1zCx6a_92IznGM24jI9RrFIQ", "content": "", "creation_timestamp": "2026-09-22T12:55:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7531a5a7-d36a-468e-911f-e242302db613/export"/>
    <published>2026-09-22T12:55:50+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7709a3c5-6ed8-495d-968c-4ab7bb0d689e/export</id>
    <title>7709a3c5-6ed8-495d-968c-4ab7bb0d689e</title>
    <updated>2026-09-26T18:02:30.592569+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7709a3c5-6ed8-495d-968c-4ab7bb0d689e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "Telegram/fI0ZbmLncz2xmiv5ONTEfe1zCx6a_92IznGM24jI9RrFIQ", "content": "", "creation_timestamp": "2026-09-22T12:55:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7709a3c5-6ed8-495d-968c-4ab7bb0d689e/export"/>
    <published>2026-09-22T12:55:50+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bcab83a5-18fd-41d8-a1e5-3c0ccc252446/export</id>
    <title>bcab83a5-18fd-41d8-a1e5-3c0ccc252446</title>
    <updated>2026-09-26T18:02:30.592646+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bcab83a5-18fd-41d8-a1e5-3c0ccc252446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw47j66y442q", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:18:46.933129Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bcab83a5-18fd-41d8-a1e5-3c0ccc252446/export"/>
    <published>2026-09-22T12:18:46.933129+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4df0a1eb-2ec9-4686-bdf3-49e116d389e5/export</id>
    <title>4df0a1eb-2ec9-4686-bdf3-49e116d389e5</title>
    <updated>2026-09-26T18:02:30.592724+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4df0a1eb-2ec9-4686-bdf3-49e116d389e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw47ek4zvk2g", "content": "CVE-2026-89775 in ARM64 KVM nested virtualization can expose freed host memory to a guest, enabling host memory read/write and potential guest escape.\n", "creation_timestamp": "2026-09-22T12:16:12.972914Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4df0a1eb-2ec9-4686-bdf3-49e116d389e5/export"/>
    <published>2026-09-22T12:16:12.972914+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bea28723-efc6-45df-9e5c-df97a347c67b/export</id>
    <title>bea28723-efc6-45df-9e5c-df97a347c67b</title>
    <updated>2026-09-26T18:02:30.592791+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bea28723-efc6-45df-9e5c-df97a347c67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw472sbtgj2w", "content": "CVE-2026-89775: ARM64 Guest Gains Host Memory Access via KVM TLB Bug", "creation_timestamp": "2026-09-22T12:10:44.459929Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bea28723-efc6-45df-9e5c-df97a347c67b/export"/>
    <published>2026-09-22T12:10:44.459929+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a506891c-e5c9-4299-87d9-14df767f00e4/export</id>
    <title>a506891c-e5c9-4299-87d9-14df767f00e4</title>
    <updated>2026-09-26T18:02:30.592860+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a506891c-e5c9-4299-87d9-14df767f00e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mw464c57o72s", "content": "ARM64 KVM nested-virtual hosts vulnerable to CVE-2026-89775: guest VMs can escape and write host memory. Update kernels now. #Security #Linux #ARM64 #KVM #KernelVulnerability https://thedailytechfeed.com/critical-linux-vulnerability-lets-arm64-kvm-guests-escape-to-host-memory/", "creation_timestamp": "2026-09-22T11:53:41.494957Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a506891c-e5c9-4299-87d9-14df767f00e4/export"/>
    <published>2026-09-22T11:53:41.494957+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b41081b0-8aec-4ec2-b727-fcbcd0fb6a6d/export</id>
    <title>b41081b0-8aec-4ec2-b727-fcbcd0fb6a6d</title>
    <updated>2026-09-26T18:02:30.592933+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b41081b0-8aec-4ec2-b727-fcbcd0fb6a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89775", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10124", "content": "\ud83d\uded1 New Linux KVM flaw CVE-2026-89775 can let an ARM64 guest escape to the host.\n\nWhen nested virtualization is enabled, the bug can leave freed host kernel memory mapped and writable. No attacks have been reported.\n\nHow the escape works \u2193 https://thehackernews.com/2026/09/new-linux-kernel-flaw-gives-arm64-kvm.html", "creation_timestamp": "2026-09-22T11:46:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b41081b0-8aec-4ec2-b727-fcbcd0fb6a6d/export"/>
    <published>2026-09-22T11:46:15+00:00</published>
  </entry>
</feed>
