Critical Linux Kernel Vulnerability CVE-2026-74580 (Vghost) Enables Root Access and VM Escape

A flaw in Linux's vhost subsystem tracked as CVE-2026-74580 and named Vghost allows a local user to read and write kernel memory and gain root access across nearly a decade of kernel versions. The vulnerability affects virtualization setups where an untrusted virtual machine can write to the host's memory and hijack the program running the virtual machine. Tencent Zhuque Lab discovered the bug. The flaw enables privilege escalation from local user to root and allows guest-to-host escape in virtualized environments.