Cybersecurity · 11 views

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.

Source The Hacker News AI Summary Updated 2h 13m ago

Story intelligence Beta

Freshness Fresh Updated 2h 13m ago

Confidence Limited Single-outlet story

Coverage Single outlet

Views 11 Community interest

Read time 1 min ~63 words

AI Summary

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit

Read full article on The Hackernews

AI summaries can be wrong sometimes—always verify important details using the source article.