A skipped cache invalidation leaves a freed page of host memory mapped and writable for a guest virtual machine on…
Zapscape, tracked as CVE-2026-64561, lets a nested KVM guest with kernel privileges escape to the host.