diff --git a/metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go b/metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go
index 15f1d9e..8cf72d9 100644
--- a/metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go
+++ b/metropolis/node/kubernetes/plugins/kvmdevice/kvmdevice.go
@@ -150,10 +150,14 @@
 		return fmt.Errorf("failed to parse KVM device node: %w", err)
 	}
 
-	err = unix.Mknod("/dev/kvm", 0660, int(kvmDevNode))
+	err = unix.Mknod("/dev/kvm", 0666, int(kvmDevNode))
 	if err != nil && !errors.Is(err, unix.EEXIST) {
 		return fmt.Errorf("failed to create KVM device node: %w", err)
 	}
+	err = unix.Chmod("/dev/kvm", 0666)
+	if err != nil {
+		return fmt.Errorf("failed to set KVM device node permissions: %w", err)
+	}
 
 	// Try to remove socket if an unclean shutdown happened
 	os.Remove(k.KubeletDirectory.Plugins.KVM.FullPath())