Sem86: a full-system x86 emulator without hardcoded semantics https://lobste.rs/s/a7byol #virtualization
https://liblisa.nl/sem86/
#virtualization
49 posts · Last used 13h
PwnEscape: Guest-to-Host KVM Escape (CVE-2026-99999) https://lobste.rs/s/np84oh #linux #security #virtualization
https://pwn.ai/blog/pwnescape
Boosted by @welcome@friends.deko.cloud
Hi Mastodon 👋 I'm the indie dev behind AQEMU, an open-source Qt GUI for QEMU.
Run Windows 11 ARM, Windows 98, Solaris, TrueNAS and RISC-V on Windows or Linux, with no command line. It has 195 ready-made guest profiles across 29 architectures, bundles QEMU 11, and has native x64 and ARM64 builds.
Source (GPL-2.0): https://github.com/chronic8000/aqemu
Microsoft Store (7-day free trial): https://apps.microsoft.com/detail/9P0HGKHQ9W19?cid=mastodon
#QEMU #OpenSource #Virtualization #RetroComputing #WindowsOnArm #Introduction
Using docker-compose with Podman rootless https://lobste.rs/s/tpxwfe #devops #linux #systemd #virtualization
https://elou.world/en/tutorial/podman-docker-compose
The hidden design compromises of Docker layers https://lobste.rs/s/uuu6us #programming #virtualization
https://loige.co/hidden-design-compromises-of-docker-layers/
Pentium II at 600Mhz with Voodoo 3 Emulated on 86Box with M6 Mac Mini https://lobste.rs/s/ztvy1b #mac #virtualization
https://nyaa.sh/reviews/mac-mini-m6-emulation
Secure VMs for Kubernetes: Hardening Kata containers https://lobste.rs/s/yfz406 #devops #security #vibecoding #virtualization
https://srcreigh.ca/posts/auditable-kata/
Zapscape (CVE-2026-64561) is another reminder that the hypervisor boundary is only as strong as the code implementing it.
The vulnerability is a guest-to-host escape in Linux KVM's x86 Shadow MMU. The root cause is a stale-root validation ordering bug that allows the page fault handler to continue using an invalidated shadow MMU root after quota reclaim, ultimately leading to a use-after-free primitive. Public research demonstrates a complete guest-to-host escape chain, although exploitation requires privileged code execution inside an L1 guest and nested virtualization exposure.
I put together a deep technical analysis covering the Shadow MMU internals, nested virtualization, exploitation stages, cross-cache reallocation, KASLR bypass, AMD vs. Intel trigger conditions, the upstream fix, and why simply moving a stale-root check eliminates the entire exploitation chain.
Interested to hear how others assess the practical risk for multi-tenant KVM deployments where nested virtualization is enabled.
https://thecybersecguru.com/news/zapscape-cve-2026-64561-kvm-guest-host-escape/
#Linux #KVM #Virtualization #KernelSecurity #CloudSecurity #CVE202664561
Proxmox VE Arm64 has officially launched, bringing feature parity, unified lifecycle management, and enterprise support to 64-bit Arm server architectures.
#ProxmoxVE #Arm64 #Virtualization #DataCenter #Linux
Proxmox officially supports Arm, with some caveats https://lobste.rs/s/wblbfk #devops #virtualization
https://www.jeffgeerling.com/blog/2026/proxmox-ve-arm-official/
Call for testing: OpenBSD vmm(4)/vmd(8) fd-ification https://www.undeadly.org/cgi?action=article;sid=20260804054218 #openbsd #vmm #vmd #virtualization #virtualmachines #testing #newcode #development #security #freesoftware #libresoftware
Windows XP 2002 for the Itanium: Unbridled rage https://lobste.rs/s/9biikj #retrocomputing #virtualization
https://virtuallyfun.com/2026/08/03/windows-xp-2002-for-the-itanium-unbridled-rage/
#PegaProx just got released in v1.0 and is out of beta now!
PegaProx for #Proxmox VE and #XCPng clusters made a huge step and is finally out of beta!
The first stable release also comes around with companies providing enterprise support. If you need SLA-backed help running PegaProx in production (or training sessions) you can now find a support partner at:
Enterprise Support & Sponsors: https://pegaprox.com/sponsors.html
Release: https://github.com/PegaProx/project-pegaprox/releases/tag/v1.0
Website: https://pegaprox.com
#homelab #virtualization #opensource #community #python #virtualization #enterprise #business #support
Du bör installera de senaste säkerhetsfixarna så snart som möjligt.#Security #Virtualization #DataCenter
VMware täpper till allvarliga sårbarheter – uppdatera snarast
More AI news from AMD, re-use of the better parts of their Strix Halo yield for industrial use cases.
"Physical AI" aka robotics and edge use cases. Buzzword galore! 😆
Still remember when "edge" was the new buzzword Pepperidge Farm Remembers
https://www.servethehome.com/amds-physical-ai-plans-come-into-focus-as-company-launches-ryzen-embedded-ai-x100/
Something I do find interesting is the claim of hard real-time assurances whilst virtualized with Xen.
Technically a guaranteed deadline of 2 years is hard real-time too, just as MS-DOS is an amazing real-time OS, but I'm sure that's not what they're talking about...
Any one got more info on the Xen claim? Haven't heard so much about them these days...
#amd #strixhalo #ai #EmbedddedSystems #PhysicalAI #edgecomputing #robotics #xen #virtualization #realtime
🤖 VMware patches three critical flaws in vCenter, ESX, Workstation, and Fusion. Two allow authentication bypass, one enables VM escape to the host OS. Broadcom recommends immediate patching.
🔗 https://www.bleepingcomputer.com/news/security/vmware-fixes-three-critical-flaws-allowing-auth-bypass-vm-escapes/
#VMware #Virtualization #CyberSec
