» Tag
kvm
5 postsJanuscape: 16-Year-Old UAF in KVM Shadow MMU Crashes Hosts
CVE-2026-53359 (Januscape) is a 16-year-old UAF in KVM's shadow paging code enabling guest-to-host escape; the public PoC reliably panics the host, disrupting all co-located VMs.
Januscape: 16-Year-Old Critical Linux KVM Escape, PoC Public
CVE-2026-53359 (Januscape) is a critical Linux KVM guest-to-host escape in the shadow MMU, present since 2010; a public PoC causes host kernel panic.
Google Pays $250K for 16-Year-Old Linux KVM Escape Flaw
Dubbed Januscape, a Linux KVM flaw lets guest VMs break out and hijack the host. Google awarded the discovering researcher a $250,000 bug bounty.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comJanuscape: KVM/x86 Guest-to-Host Escape Flaw (CVE-2026-53359)
Januscape (CVE-2026-53359) is a critical KVM/x86 guest-to-host escape flaw in the shadow MMU, dormant for 16 years and exploitable on both Intel and AMD.
How Linux Executes a Virtual Machine Process
Explore the programming model of KVM and how Linux handles virtual machines.