I'm worrying about the security of the VM host machine (against guests) as the Kernel-Based Vitrual Machine operates at kernel level.

UPDATE: Is there any guarantee that a guest can't manipulate/break the host system (execute instructions, etc.)?

UPDATE (to avoid "absolutism"): If there isn't any such guarantee, is the KVM less secure, than a non-K VM?

closed as too broad by Jens Erat, Stephane, Steve, schroeder, Lucas Kauffman Jun 5 '15 at 1:21

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Please rephrase your question so it is easier to answer it exactly, as it is right now we could say "very" and it would be a valid answer. What is your concern? did you read something that make you doubt? – Purefan Jun 4 '15 at 14:39
  • @Purefan see update – Al Klimov Jun 4 '15 at 14:46

There is no guarantee with any computational system that it can't be broken/manipulated.

Here is a list of vulnerabilities in QEMU, its up to you to determine if your specific version is vulnerable or not, and how "easy" it is to be targeted.

As a side note: we tend to avoid absolutisms in infosec because there usually is no guarantee of anything, what is bullet proof today is a swiss cheese tomorrow.

  • Ideas are always bullet proof. ;) – Al Klimov Jun 4 '15 at 15:03

Not the answer you're looking for? Browse other questions tagged or ask your own question.