The Zapscape vulnerability, impacting Linux KVM x86 code, was made public today. This security flaw, which stems from a kernel change introduced in 2020, allows for both guest-to-host escape and local privilege escalation (LPE). The LPE exploit can be leveraged on systems where the /dev/kvm device is configured as world-writable, a setup found in some Linux distributions, including Red Hat Enterprise Linux. Researchers noted that this vulnerability has been present within the KVM x86 codebase for the past six years. Its discovery highlights a significant security concern for virtualized environments and systems utilizing specific KVM configurations, necessitating prompt patching efforts.