kvm

A post exploring a new class of inexpensive IP-based KVM controllers that integrate with local or frontier vision-capable LLMs via MCP, letting AI drive target computers through HDMI capture and HID keyboard/mouse emulation without installing any software on the target machine. Several options like Sipeed NanoKVM Pro, Radxa Linkr, and Violoop are highlighted for use cases like legacy industrial systems and locked-down corporate endpoints.

Virtio-nvgpu enables near-native NVIDIA GPU access inside a KVM guest, achieving performance within 2% of bare metal for frame rendering and efficient GPU sharing among multiple guests.

jurniti provides always-on AI agents hosted in secure Firecracker microVMs with KVM hardware isolation, launching on Product Hunt with pricing from $25 per month.

JetKVM launched the Mini, a $39 open-source KVM-over-IP device enabling AI agents to control machines at the hardware level for tasks like OS reinstallation without software on the target.

JetKVM Mini is a compact, affordable KVM device starting at $33 per unit, available in Ethernet and wireless models, designed for easy remote access and control of computers with video capture and USB functionality.

Blog post detailing the discovery of CVE-2026-53360, a heap out-of-bounds read/write in KVM's SEV-SNP Page State Change handler that lets a malicious guest corrupt host kernel memory. The author discusses the bug, his incorrect fix, the better fix from a duplicate reporter, and provides a CTF challenge.

Zapscape (CVE-2026-64561) is a KVM/x86 shadow MMU use-after-free vulnerability that allows a guest VM to escape to the host and execute code with kernel privileges. The published PoC demonstrates a full guest-to-host escape targeting AMD SVM/NPT on Linux 7.1.3, posing a serious threat to multi-tenant public clouds.

DeskHop is an open-source hardware device that allows seamless keyboard and mouse sharing between two computers by dragging the mouse cursor across screens or using a hotkey, with no noticeable delay and full galvanic isolation.

Google paid a $250,000 bounty for a Linux KVM vulnerability (Januscape) that allows unprivileged guest VMs to escape and gain root access on the host, affecting cloud platforms using AMD or Intel processors.

NanoKVM-Go is a hardware device that gives your AI agent physical control over any screen, enabling direct manipulation of displays via KVM.

Januscape (CVE-2026-53359) is a use-after-free vulnerability in KVM/x86's shadow MMU that allows guest-to-host escape. Exploitation can lead to host kernel panic or code execution, affecting multi-tenant cloud environments.

The author explains their decision to stop using Vagrant and switch to managing virtual machines directly with KVM and libvirt, arguing that the additional abstraction is unnecessary for their needs and that native Linux tools suffice.

A guide detailing how to use a monitor with built-in KVM functionality and DDC commands (via m1ddc on macOS) to switch between a Mac laptop and Linux desktop with a single keyboard, mouse, and monitor, eliminating the need for manual cable swapping.

Tencent open-sources Cube Sandbox, a KVM-based micro-VM for agents that boots in <60 ms, runs in <5 MB RAM, and is E2B-compatible.

Tencent open-sourced Cube Sandbox, a lightweight Rust/KVM-based sandbox runtime for AI agents that cold-starts in under 60 ms with <5 MB overhead.

TencentCloud's CubeSandbox is an open-source, high-performance secure sandbox service for AI agents, built on RustVMM and KVM, offering hardware-level isolation, sub-60ms startup, and compatibility with the E2B SDK.