A security researcher has identified a critical vulnerability in Linux KVM, the hypervisor underlying major cloud platforms and virtualization systems.

Paulos Yibelo reported the flaw through Vercel's bug bounty program, which uses Firecracker MicroVMs built on AWS's open-source technology. The researcher described the issue as a "full VM escape" that could allow guest virtual machines to break out of their isolation and gain root access to the host system.

Vercel CEO Guillermo Rauch confirmed the discovery, stating the vulnerability affects "the industry's gold standard solution for Linux virtualization." The company's sandbox environment, designed to isolate AI agents, relies on KVM through Firecracker.

KVM powers virtualization across hyperscale clouds including AWS and Google Cloud, as well as enterprise platforms like Nutanix, HPE, and Proxmox. Its widespread adoption means the flaw could impact numerous systems if exploited.

Guest-host escapes represent a severe risk in virtualization, potentially enabling attackers to compromise entire server infrastructures and control multiple virtual machines. The vulnerability's prevalence in open-source Firecracker raises concerns about its potential exposure across diverse environments.

Yibelo's disclosure follows standard responsible disclosure practices, though details remain limited pending remediation. The researcher's bounty award, which exceeds Vercel's standard $50,000 threshold, reflects the severity assessment by the platform.

Industry experts note that patching such vulnerabilities typically allows for live migration of virtual machines without service interruption, minimizing disruption during remediation.

This incident marks the second significant KVM-related vulnerability reported this year, following the earlier Januscape flaw. The discovery underscores ongoing challenges in maintaining the security of foundational virtualization infrastructure.

The Register has sought comment from both Rauch and Yibelo for additional technical details but has not received a response at this time.