Google pays $250K for Linux vulnerability allowing guest VM escapes
https://arstechnica.com/security/2026/07/high-severity-guest-vm-escape-is-1-of-2-linux-vulnerabilities-to-surface-this-week/Open linkView original on sh.itjust.worksSyndicated from the fediverse. Read and engage on the original instance.
View original on sh.itjust.workshttps://arstechnica.com/security/2026/07/high-severity-guest-vm-escape-is-1-of-2-linux-vulnerabilities-to-surface-this-week/Open linkView original on sh.itjust.works
7 replies
Bug bounties continue paying off.
Can't wait to see the day where Linux Kernel is 100% written in Rust
And if you think that migration to Rust will magically remove all bugs and vulnerabilities, you haven't been writing software for very long.
Nobody said it would? But both of these vulnerabilities were use-after-free, so using Rust would probably have helped here (you know if Rust had been a thing back when they were introduced).
It would solve this kind of bugs for sure
... and replace them with a whole new class of bugs.
Source: I've been writing software since 1982.
Something else will come along with an entourage of fanboys pushing for it to be the next porting language.
It'll be great; until the next one comes along.
By then the kernel will be so slow that Linux will die.