Exploit / PoCcritical
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-43284 | Linux kernel ESP-in-UDP decrypts in place over shared splice pages (CWE-123) | 8.8 | 94% | PoC | |
| CVE-2026-43500 | Out-of-bounds write in Linux kernel AF_RXRPC decryption enables root access | 7.8 | 93% | ||
| CVE-2026-46113 | Linux kernel: KVM: x86 | 8.8 | <1% | ||
| CVE-2026-46316 | Linux kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry… | 9.3 | <1% | ||
| CVE-2026-53359 | Linux kernel: KVM: x86 | 8.8 | <1% |
From the original article
5 min read at thehackernews.com
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed ' Januscape ' and tracked as CVE-2026-53359 , the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.