Loading story…
Qubes OS fixed a vulnerability in qvm-copy-to-vm that could let an attacker execute arbitrary commands in the privileged Dom0 administrative domain through a specially crafted file name. Because Dom0 manages the isolated virtual machines, successful exploitation could result in full compromise of the host’s security boundary.
The flaw occurred when the file-transfer utility invoked localized kdialog or zenity dialogs via system() and passed attacker-controlled file and VM names into the command line. Validation did not safely handle certain non-ASCII characters, allowing shell metacharacters such as backticks and dollar signs to reach the shell; the fix is included in qubes-core-dom0-linux version 4.3.22.
Get the actors, campaigns, and ATT&CK mapping behind it.
1 event from the most recent confirmed update back to the earliest known activity.
Qubes OS fixed a vulnerability in qvm-copy-to-vm that could allow a crafted non-ASCII filename containing shell metacharacters to execute commands in the privileged Dom0 domain when localized kdialog or zenity dialogs were invoked through system(). The fix was released in qubes-core-dom0-linux version 4.3.22.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
5 references tracked. Mallory keeps watching after this page renders.
opennet.ru
Open sourceopennet.me
Open sourcegithub.com
Open sourcequbes-os.org
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
German government CERT advisories disclosed multiple **QEMU** vulnerabilities that affect virtualized environments and could let attackers trigger **denial of service**, expose sensitive information, and in one case manipulate data. One advisory describes a flaw leading to service disruption and information disclosure, while a later notice expands the impact to include **data manipulation**, indicating broader risk to guest or host operations depending on deployment and exposure. The advisories identify QEMU as the affected component and warn that organizations relying on the emulator and virtualization stack may face risks to **availability**, **confidentiality**, and **integrity**. Operators of cloud, server, and lab environments using QEMU should review the relevant vendor guidance and apply available updates or mitigations to reduce the chance of exploitation against virtual machines and supporting infrastructure.
Jun 29, 2026
Multiple QEMU exploitation paths were detailed for `qemu-system-x86_64`, showing how guest users could escalate to root inside Linux VMs by abusing emulator flaws and exposed virtual hardware. One write-up described a recent bug in QEMU's `access_ptr` handling that lets cross-page memory accesses spill into the next **physical** page after an unsigned underflow, enabling corruption of adjacent memory with x87 instructions such as `FLDT` and `FSTPT`/`FSTP`. Another described a long-standing TCG flaw in x86 `iret` and far call emulation affecting versions before **9.1**, where ring 3 code can induce stack accesses under ring 0 assumptions, creating kernel write and address-leak primitives that can bypass protections including **KASLR** and sometimes **kPTI**.
Aug 13, 2026
A newly disclosed KVM/x86 vulnerability, **CVE-2026-64561** or **Zapscape**, allows a privileged L1 guest to break nested virtualization isolation and achieve guest-to-host escape on Linux systems. The bug is a use-after-free in KVM/x86 shadow MMU emulation tied to the recursive shadow-page zap path and stale-root check ordering during guest-triggered page fault handling, enabling corruption of host kernel shadow pages and potential host code execution. Researcher **Hyunwoo Kim** reported the flaw to the Linux kernel security team and published a proof-of-concept showing creation of a root-owned file on the host. The issue affects both **Intel** and **AMD** hosts and is especially serious for environments that run untrusted guests with nested virtualization enabled, including multi-tenant public cloud infrastructure. On Intel, exploitation requires exposing both EPT page walk lengths 4 and 5 to the L1 guest, while no equivalent constraint was noted for AMD. The vulnerability affects Linux KVM versions from **5.9 onward** across the disclosed commit range, and a fix has been merged upstream into mainline Linux, with users advised to deploy patched stable kernels or vendor-backported updates; no in-the-wild exploitation has been claimed.
Aug 7, 2026