14 matches found
Januscape-Hotfix
Januscape Hotfix-Sammlung — CVE-2026-53359 English Vollständige Sammlung von Fixes für die KVM/x86 Shadow-MMU-VM-Escape-Sicherheitslücke CVE-2026-53359. Von Live-Patching ohne Ausfallzeit bis hin zu Kernel-Upgrades – deckt alle Betriebsszenarien ab. Ein-Klick-Diagnose & -Reparatur root@kitploit:...
CVE-2026-64561
CVE-2026-64561 — Zapscape: UAF della shadow MMU KVM/x86, fuga dalla guest a root dell'host Mirror di distribuzione HackSpeak. Questo repository è un mirror di distribuzione del PoC completo + documentazione tecnica pubblicati dal ricercatore Hyunwoo Kim @v4bel ; codice e documentazione sono...
KVM-Januscape
KVM-XJ Hotpatch dumptool.py encontra os offsets automaticamente; para saber como usar, veja o código você mesmo. Resumo da Vulnerabilidade CVE-2026-53359 Januscape é uma vulnerabilidade de use-after-free UAF na shadow MMU do KVM do kernel Linux. Tempo de latência: 16 anos agosto de 2010 a julho d...
CVE-2026-53359
🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Escape Ospite→Host Januscape è una vulnerabilità del kernel Linux KVM causata da una condizione Use-After-Free UAF nella Shadow MMU x86. In configurazioni vulnerabili, un guest malevolo può corrompere la memoria dell'host, portan...
Januscape
Januscape: Fuga da Ospite a Host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Januscape CVE-2026-53359 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una vulnerabilità di fuga da KVM che consente a un ospite di sfuggire all'host in un ambiente KVM/x86. Al meglio della...
Zapscape
La trilogia dell'escape KVM ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Escape da guest a host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Zapscape CVE-2026-64561 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una...
The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.
The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...
CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
SUSE CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, before queryi...
CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, before queryi...
PT-2026-67668
Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.9 and earlier Description An issue exists in the KVM x86 component where the system fails to check for a stale page fault, specifically an invalid or obsolete root, after making MMU pages available for the shadow MMU. I...
