CVE-2026-53359

CVE-2026-53359 A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010. Using the exploit-check.sh script, we can get more vuln info about the Linux Kernel...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM 影子分页释放后使用（客户机到宿主机逃逸） Januscape 是一个 Linux 内核 KVM 漏洞，由 x86 影子 MMU 中的释放后使用（UAF） 条件导致。在易受攻击的配置下，恶意客户机可以破坏宿主机内存，导致宿主机崩溃并可能破坏虚拟机隔离。 📌 概述 字段| 值 ---|--- CVE| CVE-2026-53359 别名| Januscape 组件| Linux 内核 KVM（x86 影子 MMU） 漏洞类型| 释放后使用 攻击向量| 客户机虚拟机 影响| 宿主机内核内存破坏 受影响平台| Inte...

CVE-2026-89727 KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: GICv2: Don't WARN on out-of-range GICVDIR INTID vgicv2deactivate passes the INTID a guest wrote to GICVDIR straight to vgicgetvcpuirq, and treats a failed lookup as a "can't happen" condition with WARNONONCE. The gues...

The vulnerability of the ioeventfd_in_range() function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the ioeventfdinrange function in the virt/kvm/eventfd.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a attacker to...

kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM nSVM module. When a nested virtual machine L2 guest executes VMSAVE/VMLOAD instructions, and these are not intercepted by the first-level hypervisor L1, KVM incorrectly uses vmcb02 instead of vmcb01 for managing guest state...

kernel: KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU

A flaw was found in the Kernel-based Virtual Machine KVM component of the Linux kernel on ARM64 systems. A highly privileged local attacker could exploit a vulnerability where the system fails to properly restrict memory access during a specific virtual machine operation. This could allow the...

The vulnerability of the `mark_page_dirty_in_slot()` function in the `virt/kvm/kvm_main.c` module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a malicious actor to trigger a service failure.

The vulnerability of the markpagedirtyinslot function in the virt/kvm/kvmmain.c file of the Kernel-based Virtual Machine KVM subsystem of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow a remote attacker to cause a service...

The vulnerability of the kvm_reset_dirty_gfn() function in the virt/kvm/dirty_ring.c module of the Kernel-based Virtual Machine (KVM) virtualization subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmresetdirtygfn function in the virt/kvm/dirtyring.c module of the Kernel-based Virtual Machine KVM virtualization subsystem of the Linux operating system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacke...

The vulnerability of the kvm_vcpu_init_nested() function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kvmvcpuinitnested function in the arch/arm64/kvm/nested.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to...

CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80699

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. This vulnerability, specifically affecting AmpereOne processors, occurs when a physical interrupt is double-deactivated in a nested virtualization context. An attacker could potentially...

CVE-2026-80665

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. The kvmhandlevncrabort function incorrectly assumes that a specific translation result always indicates an abort, even when kvmtranslatevncr returns an error for a Guest Frame Number GFN...

Linux Distros Unpatched Vulnerability : CVE-2026-80684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: s390: pci: Fix NULL dereference on AIBV allocation failure The airqivcreate can return NULL on failure, but the return value was never checked. If it fails...

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments

Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

CVE-2026-74607

A flaw was found in the Kernel-based Virtual Machine KVM Secure Virtual Machine SVM module within the Linux kernel. This vulnerability involves a race condition during the management of encrypted virtual machine contexts, specifically when handling owner and mirror lists. A privileged user or...

USN-8667-1 linux-kvm vulnerabilities

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. CVE-2025-275...

CVE-2026-74568

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 systems, specifically within the virtual Generic Interrupt Controller VGIC. A race condition can occur when a Logical Processor Interrupt LPI is released and then re-registered with the same identifier by a guest...

CVE-2026-72279 KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR KVM currently maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the backi...

ALSA-2026:49857 Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipc: limit nextid allocation to the valid ID range CVE-2026-52923 Bug Fixes and Enhancements: AlmaLinux8.10 - KVM: s390: Limit adapter indicator access to mapped page JIRA:AlmaLinux-18388...