15 matches found
Januscape
Januscape: Escape de Invitado a Anfitrión en KVM/x86 Resumen Este documento describe la vulnerabilidad Januscape CVE-2026-53359 descubierta e informada por Hyunwoo Kim @v4bel. Es una vulnerabilidad de escape de KVM que permite que un invitado escape al anfitrión en un entorno KVM/x86. Hasta donde...
CVE-2026-53359
🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Escape de Invitado a Anfitrión Januscape es una vulnerabilidad del Kernel de Linux KVM causada por una condición de Use-After-Free UAF en la x86 Shadow MMU. Bajo configuraciones vulnerables, un invitado malicioso puede corromper ...
KVM-Januscape
KVM-XJ Hot Patch dumptool.py automatically finds offsets; how to use it? Just read the code. Vulnerability Overview CVE-2026-53359 Januscape is a use-after-free UAF vulnerability in the Linux kernel KVM shadow MMU. Lurking time : 16 years August 2010 to July 2026 Affected range : All Intel/AMD x8...
CVE-2026-64561
CVE-2026-64561 — Zapscape: KVM/x86 shadow MMU UAF, guest escape to host root HackSpeak distribution mirror. This repository is a distribution mirror of the complete PoC + technical write-up publicly released by researcher Hyunwoo Kim @v4bel , with code and documentation identical to upstream. ⚠️...
Zapscape
The KVM Escape Trilogy ITScape CVE‑2026‑46316 | Januscape CVE‑2026‑53359 | Zapscape CVE‑2026‑64561 ---|---|--- Zapscape: Guest-to-Host Escape in KVM/x86 Abstract This document describes the Zapscape CVE-2026-64561 vulnerability discovered and reported by Hyunwoo Kim @v4bel. It is a KVM escape...
Januscape-Hotfix
Januscape सुधार समाधान संग्रह — CVE-2026-53359 English KVM/x86 shadow MMU वर्चुअल मशीन एस्केप भेद्यता CVE-2026-53359 के लिए पूर्ण सुधार समाधान संग्रह । शून्य डाउनटाइम हॉटफिक्स से लेकर कर्नेल अपग्रेड तक, सभी संचालन परिदृश्यों को कवर करता है। एक-क्लिक निदान और सुधार root@kitploit: GitHub 直连 curl -s...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102004 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for...
The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.
The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...
CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
CVE-2026-64561 KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
SUSE CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, before queryi...
CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, before queryi...
PT-2026-67668
Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.9 and earlier Description An issue exists in the KVM x86 component where the system fails to check for a stale page fault, specifically an invalid or obsolete root, after making MMU pages available for the shadow MMU. I...
