> TritonInfoSec News
Home / Jul 07, 2026 / Story
0
#2 The Hacker News general July 06, 2026 at 17:37 UTC

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

By [email protected] (The Hacker News)

AI Summary

CVE-2026-53359, dubbed 'Januscape,' is a 16-year-old use-after-free vulnerability in Linux KVM's shadow MMU code affecting both Intel and AMD x86 systems. A public PoC currently causes host kernel panics, but the researcher claims a separate unreleased exploit achieves full guest-to-host escape, making this a high-severity threat for virtualization environments and cloud infrastructure operators.

Read full article → https://thehackernews.com/2026/07/16-year-old-linu…

Relevance score: 87.0/100

# More from July 07

  1. 1
    CitrixBleed-ing Again? NetScaler Vulnerability Under Attack Dark Reading
  2. 3
    Max severity Adobe ColdFusion flaw now exploited in attacks BleepingComputer
  3. 4
    JadePuffer: The First Complete LLM-Driven Ransomware Attack Dark Reading
  4. 5
    Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure The Hacker News
  5. 6
    North Korean Hackers Target Open Source Developers in Supply Chain Attacks SecurityWeek
  6. 7
    Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability SecurityWeek
  7. 8
    Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT The Hacker News
  8. 9
    France to Stop Certifying Non-Quantum-Safe Encryption Schneier on Security
  9. 10
    Major medical device manufacturer notifies nearly 4 million of breach The Record