How to defend ARM64 cloud infrastructure from ITScape
ID: a7d40a03-e52a-5df5-a128-f99cfc323750
STIX ID: report--a7d40a03-e52a-5df5-a128-f99cfc323750
Feed Name: ReversingLabs Blog
Threat Score
ITScape (CVE-2026-46316) is a guest-to-host escape in the vgic-its KVM/arm64 code that allows an attacker with guest kernel privileges to execute code in the host kernel. The report includes the PoC SHA256, two YARA rules to detect exploit artifacts and privilege-drop behavior, recommended patch commit (13031fb6b835) and companion fixes, and guidance for operators of multi-tenant arm64 infrastructure to prioritize patching and monitoring.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.