Januscape

Januscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Januscape CVE-2026-53359 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape vulnerability that lets a guest escape to the host in a KVM/x86 environment. To the best of public knowledge, th...

Januscape-Hotfix

Januscape Fix Library — CVE-2026-53359 简体中文 Complete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade — covers every operational scenario. One-liner Direct curl -sL...

holos

Docker compose for KVM. Define multi-VM stacks in one YAML file. No libvirt, no XML, no distributed control plane. Website and docs: https://zeroecco.github.io/holos/ The primitive is a VM, not a container. Every workload instance gets its own kernel boundary, qcow2 overlay, cloud-init seed, and...

windows

Windows !Buildbuildurl !Versiontagurl !Sizetagurl !Packagepkgurl !Pullshuburl Windows inside a Docker container. Features ✨ Runs Windows inside a Docker container Automatic download and hands-free installation Supports modern and legacy Windows releases Near-native performance with KVM accelerati...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Guest-to-Host Escape Januscape is a Linux Kernel KVM vulnerability caused by a Use-After-Free UAF condition in the x86 Shadow MMU. Under vulnerable configurations, a malicious guest can corrupt host memory, leading to host crashe...

zeroboot

Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Try it curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' Benchmarks Metric| Zeroboot| E2B|...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

CVE-2026-89960

A flaw was found in the Linux kernel's s390/vfio-ap component. This vulnerability occurs when an error during the setup of a virtual machine KVM leaves a pointer to a cryptographic function in an invalid state. A malicious guest virtual machine could exploit this by executing a specific...

CVE-2026-89957

A flaw was found in the Linux kernel's s390/vfio-ap component. When an AP adapter or domain is hot-unplugged from a KVM Kernel-based Virtual Machine guest, the system may fail to update the guest's configuration. This occurs because a function responsible for updating the guest's configuration...

CVE-2026-89908

A flaw was found in the LoongArch KVM Kernel-based Virtual Machine component of the Linux kernel. During certain memory slot updates, the architectural flags are not correctly preserved. This can lead to a guest virtual machine accessing incorrect host memory pages, potentially resulting in...

MiracleLinux 9 : kernel-5.14.0-687.64.1.el9_8 (AXSA:2026-2261:117)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2261:117 advisory. kernel: sctp: stream: fully roll back denied add-stream state CVE-2026-52929 kernel: ipv6: sit: reload inner IPv6 header after GSO offloads...

CVE-2026-89921

A flaw was found in the Kernel-based Virtual Machine KVM for the s390 architecture in the Linux kernel. The kvminjectpfaulttoken function fails to fully zero-initialize certain data structures, specifically struct kvms390irq. This oversight allows stale stack values to persist in the extparams an...

CVE-2026-89918

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architectures. The code responsible for invalidating Translation Lookaside Buffer TLB entries, which are used to optimize virtual address translations, does not correctly handle specific end-of-address-space...

qemu-t8030

=========== QEMU README QEMU is a generic and open source machine & userspace emulator and virtualizer. QEMU is capable of emulating a complete machine in software without any need for hardware virtualization support. By using dynamic translation, it achieves very good performance. QEMU can also...

CVE-2026-89914

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine component for ARM64 architectures. An omission in the decoderangetlbi helper, responsible for managing the Translation Lookaside Buffer TLB, failed to correctly extend virtual addresses VA during certain invalidation...

CVE-2026-89931

A flaw was found in the Kernel-based Virtual Machine KVM nVMX component of the Linux kernel. This vulnerability arises from improper handling of nested virtual machine VM exits, where a specific request flag is not consistently cleared. This oversight can lead to the same memory pages being mappe...

qemu-kvm security, bug fix, and enhancement update

10.1.0-17.el98.9 - kvm-qcow2-Add-keepdatafile-command-line-option.patch RHEL-164549 - kvm-qcow2-Simplify-size-round-up-in-cocreateopts.patch RHEL-164549 - kvm-iotests-common.filter-Sort-keepdatafile.patch RHEL-164549 - kvm-iotests-244-Add-test-cases-for-keepdatafile.patch RHEL-164549 -...

EUVD-2026-115593

In kvmvfiopviommuattach of vfio.c, there is a possible double free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-99177

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. This vulnerability may lead to a Denial of Service DoS due to improper locking when marking guest memory pages as modified during AMD Secure Encrypted Virtualization SEV operations. A local user with permissions to...