Virtualization – Trackr.Live

§ Category

kvm_mmu_get_child_sp(), the Shadow-Page Reuse Check That Skipped role.word

CVE-2026-53359 is a 16-year-old use-after-free in KVM’s shadow MMU that lets a guest-root attacker on a vulnerable nested-virt KVM/x86 host crash the box or, with a separate withheld exploit, run as root on the hypervisor. The clearest detection is a kernel oops in journald; the real control is patching plus turning off nested virt you never used.

Scratch on a Ramdisk: The ESXi Default That Decides Your Timeline

On an ESXi host without persistent scratch, /var/run/log lives on an in-memory ramdisk and evaporates at the next boot. Ransomware crews get the same effect for free — they power off, kill, or reboot the workloads before encrypting — which means your entire forensic timeline had to be forwarded off-box before the incident or it never existed at all.

ESXi Forensics and the RAMdisk Logging Gap Nobody Configured Around

On ESXi the logs that explain how an intruder got root are written to a ramdisk that a reboot erases. Here is where the evidence actually lives, what to detect before it’s gone, and how it maps to the audit-storage controls the architecture violates by default.

Cyber Tools

Pod Security and Container Escape Surface in Shared Kubernetes Clusters

A practitioner’s view of the realistic container escape surface in multi-tenant Kubernetes — kernel boundaries, runtime gaps, and the controls that actually move the needle.

Virtualization

Docker Containers

Docker containers are a lightweight, standalone, executable package of software that includes everything needed to run an application: code, runtime, system tools, system libraries and settings. Containers are isolated from each other and share the underlying operating system kernel, which makes them very efficient in terms of resource usage. Benefits of using Docker containers Docker …