Project
Open-source emulator and virtualizer that runs guest operating systems across architectures, often paired with KVM for hardware acceleration.
Tencent Zhuque Lab published working demos on October 12 for Vghost (CVE-2026-74580), a vhost bug that gives local users root on Linux 4.11 through 7.2-rc4. The August 3 fix is out, but Ubuntu 24.04 and 26.04 kernels were still listed as in progress on October 13.
Reality
Lokutor released Oído, open-source transcription of any English sentence on a $5 ESP32-S3, with every figure so far computed off the board. Whether hardware built for command lists can take open-ended speech now depends on how the real boards measure.
Reality
The three escapes used a kernel bug disclosed weeks earlier, a libslirp flaw Debian 12 has yet to fix, and 0-days the agent found itself after QEMU was rebuilt from upstream. It is one researcher's account.
Reality
The point release corrects 106 source packages and rebuilds the installer around a 6.12.107+deb13 kernel, so hosts imaged from older trixie media come up on versions predating all 92 advisories and only catch up on the first update run.
Reality
Microsoft's Defender team cannot say which of three SolarWinds flaws opened the door, because the December hosts were vulnerable to all of them, which makes the exposure list more useful than the patch list.
Reality
Trail of Bits gave a preview model one job: escape the sandbox on its author's Debian 12 host. The route worth studying needed only a published CVE and an unlabelled upstream fix commit.
Reality
Docker VMM replaces the per-platform virtualization under Docker Desktop with one in-house backend. It is beta in v4.86 on Windows and macOS; Linux waits for October's general availability.
Reality
Buildroot 2026.05.1 boots an ARM root filesystem under QEMU with no hardware. The rule that decides whether the image works is which output directory you copy from.
Reality
The tdfxfb change merged for Linux 7.3 trades one dependency for another: nothing has to execute the option ROM any more, but the driver now has to understand its layout.
Reality
A Proxmox 8 GPU passthrough that passed every checklist item still refused to boot. The only signal was an IRQ and vfio interrupt remapping burst in host dmesg, and the reported culprit was an HBA.
Reality
Cuttlefish will not start on Minisforum's CIX P1 desktop because the vendor kernel strips the whole vhost subsystem. The rebuild is not optional, and it is not just a Cuttlefish problem.
Reality