{"id":11664,"date":"2026-08-07T15:10:27","date_gmt":"2026-08-07T21:10:27","guid":{"rendered":"https:\/\/beaconlab.us\/?post_type=publicacion&#038;p=11664"},"modified":"2026-08-07T15:10:58","modified_gmt":"2026-08-07T21:10:58","slug":"alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape","status":"publish","type":"publicacion","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/","title":{"rendered":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb)"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Producto(s) afectado(s):&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Linux Kernel \u2014 Subsistema KVM\/x86<\/strong> (Kernel-based Virtual Machine)<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Producto<\/strong><\/td><td><strong>Versiones afectadas<\/strong><\/td><td><strong>Versi\u00f3n corregida<\/strong><\/td><\/tr><tr><td><strong>Linux Kernel (mainline)<\/strong><\/td><td>5.9 hasta 7.1.5<\/td><td>7.1.6<\/td><\/tr><tr><td><strong>Linux Kernel (stable 6.18.x)<\/strong><\/td><td>6.18 hasta 6.18.41<\/td><td>6.18.42<\/td><\/tr><tr><td><strong>Linux Kernel (stable 6.12.x)<\/strong><\/td><td>6.12 hasta 6.12.100<\/td><td>6.12.101<\/td><\/tr><tr><td><strong>Linux Kernel (stable 6.6.x LTS)<\/strong><\/td><td>6.6 hasta 6.6.147<\/td><td>6.6.148<\/td><\/tr><tr><td><strong>Red Hat \/ RHEL<\/strong><\/td><td>Versiones con KVM afectadas<\/td><td>Actualizaci\u00f3n pendiente<\/td><\/tr><tr><td><strong>Debian (bullseye, bookworm, trixie)<\/strong><\/td><td>Todas las ramas actuales<\/td><td>Parche en distribuci\u00f3n<\/td><\/tr><tr><td><strong>CloudLinux 7h, 8, 9, 10<\/strong><\/td><td>Afectadas<\/td><td>Parche publicado<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Descripci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Se ha divulgado una vulnerabilidad de tipo <em>use-after-free<\/em> en el subsistema <strong>KVM\/x86<\/strong> del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La falla permite que un atacante con privilegios de <strong>root dentro de una m\u00e1quina virtual guest (L1)<\/strong>, en sistemas con <strong>virtualizaci\u00f3n anidada habilitada<\/strong>, escape del aislamiento de la VM y ejecute c\u00f3digo arbitrario con privilegios de <strong>root en el host f\u00edsico<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A diferencia de vulnerabilidades anteriores similares, Zapscape es explotable tanto en procesadores <strong>Intel (Ice Lake-SP en adelante)<\/strong> como <strong>AMD<\/strong>, ampliando significativamente la superficie de ataque.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El fallo reside en un <strong>orden incorrecto de validaci\u00f3n<\/strong> en el manejo de fallos de p\u00e1gina del guest dentro de la shadow MMU de KVM\/x86. Cuando KVM intenta reutilizar una shadow page (p\u00e1gina de sombra), no verifica correctamente si el <em>page root<\/em> ya fue marcado como inv\u00e1lido por el proceso de reclamaci\u00f3n de memoria (make_mmu_pages_available()).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Si el reclaim invalida el root activo, KVM contin\u00faa intentando mapear memoria dentro de ese root inv\u00e1lido. Como consecuencia, las shadow pages hijas creadas durante el proceso heredan el estado inv\u00e1lido del padre, <strong>violando el invariante interno de KVM<\/strong> que establece que las p\u00e1ginas inv\u00e1lidas nunca deben estar en la lista de p\u00e1ginas MMU activas. Esto genera una condici\u00f3n de corrupci\u00f3n de memoria explotable para escape de VM.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"572\" src=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/download-1024x572.png\" alt=\"\" class=\"wp-image-11668\" srcset=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/download-1024x572.png 1024w, https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/download-300x167.png 300w, https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/download-768x429.png 768w, https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/download.png 1376w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-text-align-center wp-block-paragraph\">Figura 1 &#8211; Escalada de Privilegios en Virtualizaci\u00f3n: Vectores de Ataque KVM Guest-to-Host<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Adicionalmente, se ha hecho publico el <strong>c\u00f3digo PoC (Proof of Concept) en GitHub<\/strong> apenas d\u00edas despu\u00e9s del anuncio, haciendo el riesgo de explotaci\u00f3n activa inmediatamente elevado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El parche mueve la verificaci\u00f3n de <em>stale root<\/em> para ejecutarse <strong>despu\u00e9s<\/strong> de make_mmu_pages_available(). Si el reclaim invalida el root actual, KVM ahora reinicia el manejo del fault con RET_PF_RETRY en lugar de continuar mapeando bajo un root inv\u00e1lido.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Actualizar el kernel a las versiones corregidas:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Rama<\/strong><\/td><td><strong>Versi\u00f3n corregida<\/strong><\/td><\/tr><tr><td><strong>Mainline<\/strong><\/td><td>7.1.6 o 7.2-rc5<\/td><\/tr><tr><td><strong>Stable 6.18.x<\/strong><\/td><td>6.18.42<\/td><\/tr><tr><td><strong>Stable 6.12.x (LTS)<\/strong><\/td><td>6.12.101<\/td><\/tr><tr><td><strong>Stable 6.6.x (LTS)<\/strong><\/td><td>6.6.148<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Actualizaci\u00f3n del kernel en diversas distribuciones:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"># Debian \/ Ubuntu<br>apt update &amp;&amp; apt upgrade linux-image-$(uname -r)<br><br># RHEL \/ CentOS \/ AlmaLinux \/ Rocky<br>dnf update kernel<br><br># CloudLinux<br>yum update kernel<br><br># Arch Linux<br>pacman -Syu linux<br><br># Verificar versi\u00f3n post-actualizaci\u00f3n<br>uname -r<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Mitigaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Mientras se planea la aplicaci\u00f3n del parche del kernel, puede seguir la siguientes recomendaciones:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Deshabilitar virtualizaci\u00f3n anidada<\/strong> en todos los hosts donde no sea estrictamente necesaria. Es la mitigaci\u00f3n m\u00e1s efectiva ya que elimina el prerrequisito principal del ataque:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"># QEMU\/KVM \u2014 deshabilitar nested virt por VM<br>-cpu ${CPU},vmx=off,svm=off<br><br># O a nivel de m\u00f3dulo del kernel<br>echo \u00aboptions kvm_intel nested=0\u00bb &gt;&gt; \/etc\/modprobe.d\/kvm.conf<br>echo \u00aboptions kvm_amd nested=0\u00bb&nbsp;&nbsp; &gt;&gt; \/etc\/modprobe.d\/kvm.conf<br>modprobe -r kvm_intel &amp;&amp; modprobe kvm_intel<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Aplicar live patching<\/strong> con herramientas como <strong>KSplice<\/strong> o <strong>kpatch<\/strong> como medida de primeros auxilios mientras se programa el reinicio para actualizar el kernel.<\/li>\n\n\n\n<li><strong>Auditar qu\u00e9 VMs tienen acceso a virtualizaci\u00f3n anidada<\/strong> en el entorno y restringirlo exclusivamente a guests de confianza.<\/li>\n\n\n\n<li><strong>En entornos cloud multi-tenant:<\/strong> revisar la configuraci\u00f3n de cpu_flags expuestos a los guests y remover vmx\/svm de los guests de terceros no confiables.<\/li>\n\n\n\n<li><strong>Monitorear<\/strong> intentos de acceso inusuales al subsistema KVM desde dentro de VMs.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">&nbsp;<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\">Informaci\u00f3n adicional:<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The<strong> <\/strong>Hacker News \u2014 Zapscape CVE-2026-64561: https:\/\/thehackernews.com\/2026\/08\/new-zapscape-kvm-flaw-could-let.html<\/li>\n\n\n\n<li>NVD \u2014 CVE-2026-64561: https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-64561<\/li>\n\n\n\n<li>Red Hat \u2014 CVE-2026-64561: https:\/\/access.redhat.com\/security\/cve\/cve-2026-64561<\/li>\n\n\n\n<li>CloudLinux \u2014 An\u00e1lisis y mitigaci\u00f3n: https:\/\/blog.cloudlinux.com\/zapscape-cve-2026-64561<\/li>\n\n\n\n<li>Debian Security Tracker: https:\/\/security-tracker.debian.org\/tracker\/CVE-2026-64561<\/li>\n\n\n\n<li>Hispasec \u2014 An\u00e1lisis t\u00e9cnico en espa\u00f1ol: <a href=\"https:\/\/unaaldia.hispasec.com\">https:\/\/unaaldia.hispasec.com<\/a><\/li>\n\n\n\n<li>Commit de correcci\u00f3n upstream: 2abd5287f083 \u2014 linux\/kernel\/git\/torvalds\/linux<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=2abd5287f083\">https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=2abd5287f083<\/a><\/p>\n","protected":false},"featured_media":11671,"template":"","class_list":["post-11664","publicacion","type-publicacion","status-publish","has-post-thumbnail","hentry"],"acf":{"activar_pdf_link":false,"pdf":null,"numero_de_boletin":"86","traffic_light_protocol":"White"},"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"description\" content=\"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"es_ES\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Beacon Lab - CSIRT by Cybolt\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab\" \/>\n\t\t<meta property=\"og:description\" content=\"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"738\" \/>\n\t\t<meta property=\"og:image:height\" content=\"234\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-08-07T21:10:27+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-08-07T21:10:58+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@BeaconLabMX\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#listItem\",\"name\":\"Alerta 2026-86 Escape de M\\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\\u00abZapscape\\u00bb)\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#listItem\",\"position\":2,\"name\":\"Alerta 2026-86 Escape de M\\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\\u00abZapscape\\u00bb)\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#listItem\",\"name\":\"Home\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"telephone\":\"+528007374357\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.mx\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/BeaconLab_V2-03.png\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/BeaconLabMX\",\"https:\\\/\\\/www.linkedin.com\\\/showcase\\\/beaconlabmx\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#webpage\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/\",\"name\":\"Alerta 2026-86 Escape de M\\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\\u00abZapscape\\u00bb) - Beacon Lab\",\"description\":\"Producto(s) afectado(s): Linux Kernel \\u2014 Subsistema KVM\\\/x86 (Kernel-based Virtual Machine) Descripci\\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\\\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \\u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de\",\"inLanguage\":\"es-ES\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#breadcrumblist\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/kvm-linux-kernel.jpeg\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#mainImage\",\"width\":738,\"height\":234},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/publicacion\\\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\\\/#mainImage\"},\"datePublished\":\"2026-08-07T15:10:27-06:00\",\"dateModified\":\"2026-08-07T15:10:58-06:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/\",\"name\":\"Beacon Lab\",\"description\":\"CSIRT by Cybolt\",\"inLanguage\":\"es-ES\",\"publisher\":{\"@id\":\"https:\\\/\\\/beaconlab.us\\\/es\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab","description":"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de","canonical_url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","position":1,"name":"Home","item":"https:\/\/beaconlab.us\/es\/","nextItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#listItem","name":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb)"}},{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#listItem","position":2,"name":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb)","previousItem":{"@type":"ListItem","@id":"https:\/\/beaconlab.us\/es\/#listItem","name":"Home"}}]},{"@type":"Organization","@id":"https:\/\/beaconlab.us\/es\/#organization","name":"Beacon Lab","description":"CSIRT by Cybolt","url":"https:\/\/beaconlab.us\/es\/","telephone":"+528007374357","logo":{"@type":"ImageObject","url":"https:\/\/beaconlab.mx\/wp-content\/uploads\/2023\/12\/BeaconLab_V2-03.png","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#organizationLogo"},"image":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/BeaconLabMX","https:\/\/www.linkedin.com\/showcase\/beaconlabmx"]},{"@type":"WebPage","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#webpage","url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/","name":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab","description":"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de","inLanguage":"es-ES","isPartOf":{"@id":"https:\/\/beaconlab.us\/es\/#website"},"breadcrumb":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#breadcrumblist"},"image":{"@type":"ImageObject","url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg","@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#mainImage","width":738,"height":234},"primaryImageOfPage":{"@id":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/#mainImage"},"datePublished":"2026-08-07T15:10:27-06:00","dateModified":"2026-08-07T15:10:58-06:00"},{"@type":"WebSite","@id":"https:\/\/beaconlab.us\/es\/#website","url":"https:\/\/beaconlab.us\/es\/","name":"Beacon Lab","description":"CSIRT by Cybolt","inLanguage":"es-ES","publisher":{"@id":"https:\/\/beaconlab.us\/es\/#organization"}}]},"og:locale":"es_ES","og:site_name":"Beacon Lab - CSIRT by Cybolt","og:type":"article","og:title":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab","og:description":"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de","og:url":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/","og:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg","og:image:secure_url":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg","og:image:width":738,"og:image:height":234,"article:published_time":"2026-08-07T21:10:27+00:00","article:modified_time":"2026-08-07T21:10:58+00:00","twitter:card":"summary_large_image","twitter:site":"@BeaconLabMX","twitter:title":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb) - Beacon Lab","twitter:description":"Producto(s) afectado(s): Linux Kernel \u2014 Subsistema KVM\/x86 (Kernel-based Virtual Machine) Descripci\u00f3n Se ha divulgado una vulnerabilidad de tipo use-after-free en el subsistema KVM\/x86 del kernel de Linux. La misma se ha identificado como CVE-2026-64561 con un score CVSSv3.1 7.0 \u2014 Importante, el investigador lo nombro Zapscape, La falla permite que un atacante con privilegios de","twitter:image":"https:\/\/beaconlab.us\/wp-content\/uploads\/2026\/08\/kvm-linux-kernel.jpeg"},"aioseo_meta_data":{"post_id":"11664","title":null,"description":null,"keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"WebPage","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-08-07 21:06:24","updated":"2026-08-07 21:11:57","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/beaconlab.us\/es\/\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAlerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb)\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/beaconlab.us\/es\/"},{"label":"Alerta 2026-86 Escape de M\u00e1quina Virtual con RCE en host en el Kernel KVM de Linux (\u00abZapscape\u00bb)","link":"https:\/\/beaconlab.us\/es\/publicacion\/alerta-2026-86-escape-de-maquina-virtual-con-rce-en-host-en-el-kernel-kvm-de-linux-zapscape\/"}],"_links":{"self":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11664","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion"}],"about":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/types\/publicacion"}],"version-history":[{"count":3,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11664\/revisions"}],"predecessor-version":[{"id":11670,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/publicacion\/11664\/revisions\/11670"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media\/11671"}],"wp:attachment":[{"href":"https:\/\/beaconlab.us\/es\/wp-json\/wp\/v2\/media?parent=11664"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}