ITScape KVM Escape: Public PoC Exploit Threatens Cloud Hosts

A critical KVM/arm64 vulnerability (CVE-2026-46316, dubbed ITScape) and a public proof-of-concept exploit have been disclosed; the flaw is a VGIC-ITS race condition allowing untrusted guest VMs to escape to the host and obtain kernel (root) privileges, posing severe risk to multi-tenant arm64 public clouds — maintainers have merged a patch and operators must apply it immediately.