CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Побег из гостевой в хостовую Januscape — это уязвимость ядра Linux KVM, вызванная состоянием Use-After-Free UAF в x86 Shadow MMU. При уязвимых конфигурациях вредоносная гостевая система может повредить память хоста, что приводит ...

Januscape

Januscape: Fuga Convidado-Anfitrião em KVM/x86 Resumo Este documento descreve a vulnerabilidade Januscape CVE-2026-53359 descoberta e reportada por Hyunwoo Kim @v4bel. É uma vulnerabilidade de escape KVM que permite que um convidado escape para o anfitrião em um ambiente KVM/x86. Até onde se sabe...

CVE-2026-80560

This Linux kernel vulnerability affects the openrisc architecture's signal handling. The root cause is in restore_sigcontext(), which copies the entire supervision register (SR) from the user-controlled signal frame and only clears SPR_SR_SM before reloading it into hardware. All other privileged...

Januscape-Hotfix

Januscape Hotfix-Sammlung — CVE-2026-53359 English Vollständige Sammlung von Fixes für die KVM/x86 Shadow-MMU-VM-Escape-Sicherheitslücke CVE-2026-53359. Von Live-Patching ohne Ausfallzeit bis hin zu Kernel-Upgrades – deckt alle Betriebsszenarien ab. Ein-Klick-Diagnose & -Reparatur root@kitploit:...

CVE-2026-64561

CVE-2026-64561 — Zapscape: UAF della shadow MMU KVM/x86, fuga dalla guest a root dell'host Mirror di distribuzione HackSpeak. Questo repository è un mirror di distribuzione del PoC completo + documentazione tecnica pubblicati dal ricercatore Hyunwoo Kim @v4bel ; codice e documentazione sono...

KVM-Januscape

KVM-XJ Hotpatch dumptool.py encontra os offsets automaticamente; para saber como usar, veja o código você mesmo. Resumo da Vulnerabilidade CVE-2026-53359 Januscape é uma vulnerabilidade de use-after-free UAF na shadow MMU do KVM do kernel Linux. Tempo de latência: 16 anos agosto de 2010 a julho d...

slides

Folien Eine Sammlung von Folien. 2025 Eine Geschichte über das Herausfordern von MTE: Google Pixel mit aktiviertem Kernel-MTE auf Anhieb rooten Konferenz: POC 2025 2024 Einfacher Bug, aber kein einfacher Exploit: Android-Geräte auf Anhieb rooten Konferenz: Cansecwest 2024 Fast identisch mit POC...

Zapscape

La trilogia dell'escape KVM ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Escape da guest a host in KVM/x86 Sommario Questo documento descrive la vulnerabilità Zapscape CVE-2026-64561 scoperta e segnalata da Hyunwoo Kim @v4bel. Si tratta di una...

CVE-2026-72173

A flaw was found in the Linux kernel's memory management unit MMU. The pagemappmdrangethp function incorrectly issued a warning when encountering certain non-present Page Middle Directory PMD entries. This issue arose because an assertion related to migration-only softleaf entries became outdated...

UBUNTU-CVE-2026-72328

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdnaumap lifetime race amdxdnaumaprelease calls the blocking mmuintervalnotifierremove before removing the object from abo-mem.umaplist. If aie2populaterange runs concurrently, it may obtain a...

EUVD-2026-59227

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix potential amdxdnaumap lifetime race amdxdnaumaprelease calls the blocking mmuintervalnotifierremove before removing the object from abo-mem.umaplist. If aie2populaterange runs concurrently, it may obtain a...

The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

CVE-2026-68428

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

CVE-2026-68428 KVM: x86/mmu: Fix use-after-free on vendor module reload

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmudestroycaches destroys ptelistdesccache and mmupageheadercache, but leaves both pointers unchanged. The pointers live in kvm.ko, and therefore survive when a vendor modu...

EUVD-2026-55288

In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transferargstostack The stop value is derived from bprm-p PAGESHIFT. The index variable is an unsigned long. If bprm-p drops below PAGESIZE and stop becomes zero the loop condition index =...

SUSE CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

Unbreakable Enterprise kernel security update

5.4.17-2136.358.2 - xfs: resample the data fork mapping after cycling ILOCK Darrick J. Wong Orabug: 39776792 CVE-2026-64600 - net: Work around Marvell NIC TX stalls Venkat Venkatsubra Orabug: 39765820 5.4.17-2136.358.1 - KVM: x86: Fix shadow paging use-after-free due to unexpected role Paolo...