NewsThe Hacker News06.07.2026

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit

Affected vendors and products

Debian Linux
Debian Linux-6.1
IBM Qradar Siem
Linux Linux
Linux Linux Kernel
Ubuntu Aws
Ubuntu Aws-6.8
Ubuntu Aws-hwe
Ubuntu Azure
Ubuntu Azure-4.15
Ubuntu Gcp
Ubuntu Gcp-4.15

Other news entries

Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting ServersNewsThe Hacker News28.10.2026
Alleged KillSec Ransomware Mastermind a 16-Year-OldNewsDark Reading01.10.2026
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and ServersNewsThe Hacker News01.10.2026
Police dismantle KillSec ransomware gang allegedly led by 16-year-oldNewsBleepingComputer01.10.2026
16-year-old researcher found a Microsoft bug, got admin access to databases with 17.3 trillion rowsNewsThe Register — Security30.09.2026
16-year-old KVM flaw allows attackers to escape VMs and take over Linux serversNewsCSO Online07.07.2026
New Januscape Linux flaw allows VM escape on Intel, AMD devicesNewsBleepingComputer07.07.2026
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD SystemsNewsSecurityWeek07.07.2026

Source: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html

Affected vendors and products

More on 16-Year-Old

Other news entries