Lucene search
+L

151 matches found

Kitploit
Kitploit
added 2026/09/15 7:47 p.m.9 views

januscape

Januscape — Linux KVM/x86 guest-to-host escape tracking site Source for the Januscape patch-status tracker: a single-page site recording which distributions have shipped a fix for the KVM/x86 guest-to-host escape in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affect...

6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 5:54 p.m.10 views

Januscape

Januscape: Escape de Invitado a Anfitrión en KVM/x86 Resumen Este documento describe la vulnerabilidad Januscape CVE-2026-53359 descubierta e informada por Hyunwoo Kim @v4bel. Es una vulnerabilidad de escape de KVM que permite que un invitado escape al anfitrión en un entorno KVM/x86. Hasta donde...

8.8CVSS6.7AI score0.00962EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/15 5:46 p.m.9 views

Zapscape

The KVM Escape Trilogy ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Zapscape CVE-2026-64561 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape...

9.3CVSS6.8AI score0.00962EPSS
SaveExploits10References4
Kitploit
Kitploit
added 2026/09/15 12:57 p.m.5 views

CVE-2026-53359-Kernel-Fix

Chino | Inglés Chino Tutorial para actualizar el kernel de Linux a 7.1.3 y corregir CVE-2026-53359 Declaración: Este artículo solo documenta el proceso de corrección en mi propio entorno de servidor. No es un análisis de seguridad profesional. Si hay errores, agradezco las correcciones. Nota de...

8.8CVSS7AI score0.00962EPSS
SaveExploits5
OSV
OSV
added 2026/09/14 4:33 p.m.8 views

OESA-2026-3709 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Check for invalid/obsolete root after making MMU pages available\n\nCheck for a "stale" page fault, i.e. for an invalid and/or obsolete root, after...

8.8CVSS0.00347EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/09 1:36 p.m.5 views

Zapscape-Fix

Zapscape-Fix — CVE-2026-64561 Kernel Live Patch KVM/x86 English |简体中文 A kernel live patch that fixes CVE-2026-64561 Zapscape on CentOS Stream 8 / RHEL 8 KVM hosts all 4.18.0- kernels. Without the patch : a tenant VM guest can escape to the host with guest-side actions alone and execute code with...

8.8CVSS6.5AI score0.00347EPSS
SaveExploits4References1
Tenable Nessus
Tenable Nessus
added 2026/09/06 12:00 a.m.9 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053262 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use scratch field in MMIO fragment to hold small write values When exiting to userspace...

8.8CVSS6.6AI score0.00128EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/09/04 8:05 a.m.8 views

KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

...

9.3CVSS5.8AI score0.00177EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.10 views

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500249)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500249 advisory. - inet: frags: strip GSO state from fragments before reassembly Xinyang Ge Orabug: 39974835 CVE-2026-80590 - KVM: x86/mmu: Stop needlessly making...

10CVSS7AI score0.00751EPSS
SaveExploits21References593
OSV
OSV
added 2026/09/04 12:00 a.m.5 views

UBUNTU-CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS6.6AI score0.00177EPSS
SaveExploits0References9
UbuntuCve
UbuntuCve
added 2026/09/04 12:00 a.m.10 views

CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS5.6AI score0.00177EPSS
SaveExploits0References8
AstraLinux
AstraLinux
added 2026/09/03 2:20 p.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a “stale” page fault, i.e., an invalid and/or obsolete root. This occurs after making MMU pages available for the shadow MMU. If reclaiming shad...

8.8CVSS6.1AI score0.00347EPSS
SaveExploits4References3
OSV
OSV
added 2026/09/03 1:06 p.m.6 views

AZL-99062 CVE-2026-80726 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS5.6AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/03 8:21 a.m.10 views

EUVD-2026-70330

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

5.8AI score0.00177EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/03 8:21 a.m.23 views

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

9.3CVSS5.8AI score
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.5 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098882)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098882 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected role Commit 0cb2af2ea66ad KVM: x86:...

8.8CVSS6.3AI score0.00962EPSS
SaveExploits5References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.10 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098768)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098768 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of...

7.9CVSS6.7AI score0.00158EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.8 views

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098759 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer When advancing the...

5.5CVSS6AI score0.00109EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/08/24 2:37 p.m.13 views

kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

A flaw was found in the Kernel-based Virtual Machine KVM for x86. This vulnerability occurs when KVM incorrectly re-checks Level 1 L1 intercepts during the completion of userspace I/O emulation for a Level 2 L2 instruction. If the L1 or host userspace modifies I/O interception settings during thi...

7.9CVSS7AI score0.00158EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Warns when a triple fault assertion never “escapes” from L2 The warnings are removed because they perform a sanity check that ensures KVM never allows a triple fault in L2 to escape and end up in L1. In normal operation...

5.5CVSS6AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder