Vulnerabilities · 68 days ago

Guest Root Can Break KVM Host Isolation

A guest VM on KVM is not a clean containment boundary here. Once an attacker has root inside the VM, the broken shadow MMU code can let them corrupt host bookkeeping and cross into the hypervisor, so “it’s just a guest” is the wrong triage.

The flaw is CVE-2026-53359, a use-after-free in Linux KVM’s shadow MMU on x86. It works on both Intel and AMD, has sat in the kernel for 16 years, and was demonstrated as a zero-day in Google’s kvmCTF; mainline patches are now propagating through downstream distributions.

That gives this a wider operational footprint than a single disclosed bug. Multi-tenant clouds, hosting providers, and anyone exposing nested virtualization need to treat patch lag as part of the exposure, because a guest-root compromise can still become host compromise across every VM on the same machine.

CVE-2026-53359

NVD KEV

EPSS 1.0% (59th percentile). Microsoft patch: CBL-Mariner Releases.

Timeline

Sources

6 sources covering this story

Ars Technica Security Jul 8
Google pays $250K for Linux vulnerability allowing guest VM escapes
Both vulnerabilities allow untrusted users to gain root privileges.
CSIRT Italia / ACN Jul 8
KVM: PoC pubblico per lo sfruttamento della CVE-2026-53359
Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 – nota col nome di “Januscape” - presente nella componente KVM del kernel Linux.
CSO Online Jul 7
16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers
A critical vulnerability dubbed Januscape patched in the Linux kernel-based virtualization module poses arbitrary code execution risk to multi-tenant cloud environments and virtualized enterprise servers.
SecurityWeek Jul 7
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems
The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.
BleepingComputer Jul 7
New Januscape Linux flaw allows VM escape on Intel, AMD devices
A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host.
The Hacker News Jul 6
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
Januscape abuses KVM shadow MMU page reuse to panic x86 hosts, with Kim reporting a controlled full escape exploit behind the unreleased path.

Entities

CVE-2026-53359

Part of the PlainSec briefing for 2026-07-08

Editions

Vulnerabilities · 68 days agoGuest Root Can Break KVM Host IsolationA guest VM on KVM is not a clean containment boundary here. Once an attacker has root inside the VM, the broken shadow MMU code can let them corrupt host bookkeeping and cross into the hypervisor, so “it’s just a guest” is the wrong triage.The flaw is CVE-2026-53359, a use-after-free in Linux KVM’s shadow MMU on x86. It works on both Intel and AMD, has sat in the kernel for 16 years, and was demonstrated as a zero-day in Google’s kvmCTF; mainline patches are now propagating through downstream distributions.That gives this a wider operational footprint than a single disclosed bug. Multi-tenant clouds, hosting providers, and anyone exposing nested virtualization need to treat patch lag as part of the exposure, because a guest-root compromise can still become host compromise across every VM on the same machine.

CVE-2026-53359

NVD KEV

EPSS 1.0% (59th percentile). Microsoft patch: CBL-Mariner Releases.

Timeline

Jul 8 Reported by Ars Technica Security

Jul 7 Reported by CSO Online

Jul 6 Reported by The Hacker News

Sources6 sources covering this story

Ars Technica Security Jul 8

Google pays $250K for Linux vulnerability allowing guest VM escapes

Both vulnerabilities allow untrusted users to gain root privileges.

CSIRT Italia / ACN Jul 8

KVM: PoC pubblico per lo sfruttamento della CVE-2026-53359

Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 – nota col nome di “Januscape” - presente nella componente KVM del kernel Linux.

CSO Online Jul 7

16-year-old KVM flaw allows attackers to escape VMs and take over Linux servers

A critical vulnerability dubbed Januscape patched in the Linux kernel-based virtualization module poses arbitrary code execution risk to multi-tenant cloud environments and virtualized enterprise servers.

SecurityWeek Jul 7

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.