Zapscape (CVE-2026-64561)

Discussion (4 Comments)Read Original on HackerNews

minimaltom•about 2 hours ago

Oh yay another one lol. This one seems much more general than the prior one that needed nested page tables.

Patch Thursday for cloud VM ppl lol

metadat•about 1 hour ago

Do most cloud providers have live-migration or what is the approach to make this seamless? What kind of interruption might tenants notice?

cudder•about 1 hour ago

It depends. If you have a plain old VM with no GPU and networked storage it's easy to migrate. If you're using low latency HW on the host it gets a lot trickier. Kuberenetes or some other fleet management helps there, you spin up new nodes and drain the old ones as capacity allows. If you have your PodDisruptionBudgets set right you won't notice much.

You can also use ksplice to live patch the vulnerable kernels as a first aid. I'm not an expert but I think there are some limits to what you can accomplish with it. Also guessing that the embargo period allows the big names to roll the patches out gradually enough that you won't see any panic shutdowns.

rvz•about 2 hours ago

Another serious critical vulnerability that almost no-one cares about, when they should.

Zapscape (CVE-2026-64561)

⚡ Community Insights

Discussion (4 Comments)Read Original on HackerNews