{"vulnerability": "CVE-2026-5335", "sightings": [{"uuid": "22835299-3a22-48e5-a5b0-3ca64b9a8ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/officesmtpseller/1003", "content": "Update On 2fa Links Outage \n\n\nour servers were effected by a vulnerability that cause the servers to go shutdown.\n\nMaintenance Update Notice\n\nThe kernel update to patch CVE-2026-53359 has been successfully completed.\n\nIf you experience any issues or notice anything unusual with your services, please do not hesitate to open a support ticket with us.\n\nThank you for your patience and cooperation.\n\n\n@shacoder", "creation_timestamp": "2026-07-30T05:00:04.387599Z"}, {"uuid": "23e94066-373e-49ef-be44-ed5ece9bec3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/425", "content": "\ud83d\udee0 Update on CVE-2026-53359 (\"Januscape\"): the proper fix is here\n\nHi everyone. Our earlier mitigation was a hotfix, a temporary and forced measure. The proper fix is now available, so the hotfix is no longer needed.\n\nTL;DR: Disabling nested virtualization is no longer needed. It was a hotfix, and for some setups it wasn't even possible. The real fix is a kernel bump.\n\nIf you already applied it, roll it back and upgrade instead.\n\nGeneric Linux: make sure you're on Linux 6.18.38 or newer (with the fixes).\nSafe kernel versions across all branches:\n6.1.177 \u00b7 6.6.144 \u00b7 6.12.95 \u00b7 6.18.38 \u00b7 7.1.3 \u00b7 7.2-rc1\n\nFor Talos, follow the runbook below\ud83d\udc47", "creation_timestamp": "2026-07-30T01:00:16.235660Z"}, {"uuid": "8ee1d3fd-dc90-4543-8326-5fa2787ec757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhinw5uy2v", "content": "CVE-2026-5335 - Magic Export & Import\nCVE ID : CVE-2026-5335\n \n Published : May 4, 2026, 7:16 a.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possi...", "creation_timestamp": "2026-05-04T10:26:32.884394Z"}, {"uuid": "8fc63e4d-2f19-47a0-bbac-d0c8fcc1e31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlly3lrl2y", "content": "\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53353 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439?\n\n\n\nhttps://kripta.biz/posts/E87FF37E-A6C9-4E3B-A722-3BE0E4FBE2E3", "creation_timestamp": "2026-07-01T22:41:20.616133Z"}, {"uuid": "30bad885-b13a-4ac8-baa1-9a6f30f3b633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlmtk27t2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53354 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/3E61CCBE-3DE1-4E19-888D-E2E62B3B1F5A", "creation_timestamp": "2026-07-01T22:41:48.843016Z"}, {"uuid": "cbb7888b-44c3-45a1-b1ef-a018583b5d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53356", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlnl6wwd2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53356 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F7FE501C-616C-423C-BA2A-7F524FB46FD5", "creation_timestamp": "2026-07-01T22:42:14.557211Z"}, {"uuid": "42c5ba3f-cd2e-4996-b369-20063c3cf82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53350", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvbdcrx2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53350 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6547817B-9D3E-45BD-B756-BCCF78F12D38", "creation_timestamp": "2026-07-01T22:46:32.240592Z"}, {"uuid": "b44e5fcb-7f96-45d7-b6d0-d3d202a0fc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53351", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvv3owd2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53351 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/B62D8076-A951-4F59-95CB-53B241E76B43", "creation_timestamp": "2026-07-01T22:46:52.622616Z"}, {"uuid": "02617bc5-fab0-4ddf-b0ce-1fc5f908d928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxnkdke2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53352 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/DF8AFD93-507F-464A-BF76-9C5B3325306E", "creation_timestamp": "2026-07-01T22:47:51.693708Z"}, {"uuid": "15913b31-4359-49df-8309-97f52c5075a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53355", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxzz3ey2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53355 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/3D8A259B-3E51-4646-8FA3-F8C356F5747C", "creation_timestamp": "2026-07-01T22:48:04.734616Z"}, {"uuid": "623aaeff-e32a-4ede-bc8d-46984d80b61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116854189956800499", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-53357) https://vuldb.com/vuln/375929", "creation_timestamp": "2026-07-03T04:37:16.183752Z"}, {"uuid": "71ad687f-d31a-4efd-bed2-1d3d2a239f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyqck3e627", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53357 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Bluetooth \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C2691122-50BE-4DF2-B1A1-832B87B1C2D7", "creation_timestamp": "2026-07-03T07:14:24.201111Z"}, {"uuid": "6537d2d6-662d-4f9e-978a-fb82eaecfaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53358", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyrs72po2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53358 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Bluetooth \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/94BD36E8-A1BB-4B72-8025-379F43E5D9A0", "creation_timestamp": "2026-07-03T07:15:13.406837Z"}, {"uuid": "38f543e8-bc76-4946-a2d4-850c3856058e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5hlemyh2o", "content": "CVE-2026-53357: Bluetooth's UAF Flaw Could Enable Serious Exploits #CVE2026 #BluetoothSecurity #UAFVulnerability", "creation_timestamp": "2026-07-04T03:44:19.576225Z"}, {"uuid": "4f8bdc47-bc1d-41af-a626-5f53f5a69780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jd3vqp24", "content": "CVE-2026-53357 Exposes Bluetooth Protocol: Exploit Potential Uncertain #CVE2026 #BluetoothSecurity #Vulnerability", "creation_timestamp": "2026-07-04T03:45:17.472958Z"}, {"uuid": "e89cde24-6bc6-4836-b718-76b34dad39b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jf2rll2d", "content": "CVE-2026-53357 Bluetooth Vulnerability Exposes Questions on Device Security #BluetoothVulnerability #DeviceSecurity #CyberSecurity", "creation_timestamp": "2026-07-04T03:45:20.211901Z"}, {"uuid": "a7528a17-5cbc-4519-9b49-3c9c26a512ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jgwyoe2f", "content": "CVE-2026-53357: Bluetooth Vulnerability Lacks Robust Mitigation Guidance #CVE2026 #BluetoothVulnerability #CyberSecurity", "creation_timestamp": "2026-07-04T03:45:21.608681Z"}, {"uuid": "33724784-b4b4-4c6b-9b3f-5951780b8cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jiucux2m", "content": "CVE-2026-53357: Bluetooth Vulnerability Exposes Gaping Holes in Protocol Stability #Bluetooth #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-04T03:45:24.219998Z"}, {"uuid": "96eaa50a-3ccb-4a7b-a09f-28799e688257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jkt32727", "content": "CVE-2026-53357 Bluetooth: Is the UAF Vulnerability a Major Threat or Manageable Risk? #CVE2026 #BluetoothSecurity #UAFVulnerability", "creation_timestamp": "2026-07-04T03:45:25.703953Z"}, {"uuid": "6beeb024-2bf0-44b6-99f8-cc50bfae577d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpttwie53x23", "content": "CVE-2026-53359 - KVM: x86: Fix shadow paging use-after-free due to unexpected role\nCVE ID : CVE-2026-53359\n \n Published : July 4, 2026, 12:17 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shad...", "creation_timestamp": "2026-07-04T19:59:00.967681Z"}, {"uuid": "0e68c368-0ccc-4561-8566-ba9dd0db3554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpunaasf442y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/F9CDFDE2-37AC-4BC1-839E-6020F968C338", "creation_timestamp": "2026-07-05T03:31:57.012156Z"}, {"uuid": "dd794a68-2a04-4caf-bed5-8060931740c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116865551315118647", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53359) https://vuldb.com/vuln/376323", "creation_timestamp": "2026-07-05T04:46:36.638474Z"}, {"uuid": "5e930966-8f18-4944-a368-dd30a87125bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/askfred.be/post/3mpuz3gyt2z23", "content": "I had to sit with the latest Linux stable kernel releases for a minute. Greg Kroah-Hartman pushed out seven updates, and tucked inside is a fix for a KVM use-after-free vulnerability (CVE-2026-53359) that was actually introduced all the way back in kernel version 2.6.36.", "creation_timestamp": "2026-07-05T07:03:55.698929Z"}, {"uuid": "5d8147d5-dedb-4636-ada4-935b17f1763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:31.960797Z"}, {"uuid": "b467cc42-8b5b-4dc5-bac7-ec91fa43cd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53350", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:16.553438Z"}, {"uuid": "e9e10c51-650e-4d18-967d-4dbaeb5f3705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53352", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:18.884013Z"}, {"uuid": "c9f1d7fe-0bd0-4afc-8e53-bfc466ff47ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:22.505401Z"}, {"uuid": "ba7fcfed-8452-4144-94bd-3a85b2dce4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53355", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:24.851330Z"}, {"uuid": "54205c88-c831-400b-ba62-bde89d0328ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53356", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:27.124304Z"}, {"uuid": "9a005327-24c1-489d-87ac-cf28eea80b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:29.394204Z"}, {"uuid": "52accd86-6905-42c0-9d2d-50990cf612e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116874019977365878", "content": "Oh, goodie. KVM Guest-to-Host escape\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:18.875429Z"}, {"uuid": "09c98d49-f641-401e-a4ad-e71ba71980d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mpyjr3o4weo2", "content": "Oh, goodie. KVM Guest-to-Host escape\n\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\n\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:38.808871Z"}, {"uuid": "4e6681fb-052a-46f5-97f2-9d25f5b3e4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpykhay4su2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)", "creation_timestamp": "2026-07-06T16:52:45.031950Z"}, {"uuid": "de18a5ba-b247-4d0d-90a2-6e050acf5be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpyl7a53oo26", "content": "Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.\n\n#Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day", "creation_timestamp": "2026-07-06T17:06:09.848148Z"}, {"uuid": "6d4b7857-11cd-4017-b8a8-dc1522530eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874224446929748", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: A Long-Lived KVM Bug Resurfaces: Shadow Paging Use-After-Free in the Linux Kernel (CVE-2026-53359)\nLink: https://darkwebinformer.com/a-long-lived-kvm-bug-resurfaces-shadow-paging-use-after-free-in-the-linux-kernel-cve-2026-53359/", "creation_timestamp": "2026-07-06T17:32:18.225958Z"}, {"uuid": "c56690b2-9f13-46bb-a324-740224bdb464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mpyp5ldmoa2q", "content": "A guest-to-host VM escape exploit against KVM on x86 (CVE-2026-53359), released open source with a writeup.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fgithub.com%2FV4bel%2FJanuscape&t=Januscape%3A%20Guest-to-Host%20Escape%20in%20KVM%2Fx86%20%5BCVE-2026-53359%5D", "creation_timestamp": "2026-07-06T18:16:49.470749Z"}, {"uuid": "542a9219-7fe5-4192-9df3-f422f0047346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mpypvjfaoc2v", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\ncomments \u00b7 posted on 2026.07.06 at 13:35:03 (c=1, p=5)", "creation_timestamp": "2026-07-06T18:30:12.440323Z"}, {"uuid": "b25f3bd0-cb8b-4f92-a7be-431bfcee9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mpypwr5whs2z", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nhttps://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-06T18:30:53.961579Z"}, {"uuid": "84225216-99ed-4661-8748-1942f0eff8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mpypyvuc5r2i", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nDiscussion", "creation_timestamp": "2026-07-06T18:32:06.361306Z"}, {"uuid": "3a335685-6c72-4ce0-befa-46b290898276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpyq4y4jw22x", "content": "Januscape (CVE-2026-53359) is a KVM shadow-MMU use-after-free flaw enabling guest-to-host corruption on Intel and AMD, with potential for host code execution.\n", "creation_timestamp": "2026-07-06T18:34:23.090195Z"}, {"uuid": "e816ebb5-2357-4d4b-843d-334523b95175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mpyrusp63r2w", "content": "A critical vulnerability dubbed \u2018Januscape\u2018 (CVE-2026-53359) allows a guest virtual machine to panic or potentially execute code on the host [\u2026]", "creation_timestamp": "2026-07-06T19:05:36.014975Z"}, {"uuid": "ad58168d-6e41-4116-96a8-9211edff0375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpyrvo7efd2u", "content": "\ud83e\udd16 CVE-2026-53359 (Januscape): 16-year-old KVM use-after-free allows guest VM escape to host on Intel & AMD x86. Public PoC crashes the host kernel.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-06T19:06:04.744045Z"}, {"uuid": "60dc6d24-869a-4674-b310-092a95b1edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpysiv6jxm24", "content": "Januscape (CVE-2026-53359): 16-Year-Old Linux KVM Flaw Allows Guest-to-Host VM Escape\n\nhttps://blindthoughts.com/januscape-cve-2026-53359-kvm-guest-host-escape\n\n#linuxkernel #kvm #virtualization #cve #hypervisorsecurity", "creation_timestamp": "2026-07-06T19:16:49.716997Z"}, {"uuid": "81597e09-ac83-4281-b6f0-ed179ea34510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mpytar6r3m2y", "content": "Researchers disclosed Januscape (CVE-2026-53359), a 16-year-old flaw in the Linux KVM hypervisor that could allow attackers to escape from a guest virtual machine to the host on both Intel and AMD x86 systems. \n\nvia The Hacker News", "creation_timestamp": "2026-07-06T19:30:12.949960Z"}, {"uuid": "d70a60fe-1449-41fa-b4bd-842de705390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mpytigbcor2o", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T19:34:28.300792Z"}, {"uuid": "bc180b18-2257-419a-9b4c-a48091866793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpyv6g2ydf2w", "content": "Januscape: a 16-year-old Linux KVM flaw (CVE-2026-53359) lets a guest VM take down the host on Intel and AMD. Multi-tenant & ICS virtualization at risk.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/januscape-kvm-guest-to-host-escape-cve-2026-53359-2026", "creation_timestamp": "2026-07-06T20:04:39.616232Z"}, {"uuid": "24ae5c9e-04f8-47df-8f1a-5a1c3e2448f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3mpyy6sixif2l", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T20:58:34.062286Z"}, {"uuid": "c551e1a2-6d80-4d94-b995-27b59959731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mpyybkufeh26", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] | Discussion", "creation_timestamp": "2026-07-06T21:00:06.831752Z"}, {"uuid": "1d41deea-5fba-4128-a97f-89bd12a43ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpyysmvsec2q", "content": "Januscape (CVE-2026-53359): A Silent 16-Year Linux KVM Flaw That Can Collapse Cloud Hosts From Inside a Guest Machine +\u00a0Video\n\nIntroduction: A Hidden Crack Inside the Virtualization Core of Linux A newly disclosed vulnerability in the Linux Kernel-based Virtual Machine (KVM) subsystem has shaken\u2026", "creation_timestamp": "2026-07-06T21:09:39.456010Z"}, {"uuid": "c7212098-9719-4438-b213-1b357f3635ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpz4idj4gf2i", "content": "Linux KVM flaw CVE-2026-53359, Januscape, lets a guest VM trigger host panic and possible code execution on x86 Intel and AMD systems via a shadow MMU use-after-free bug. #Januscape #CVE202653359 #LinuxKernel", "creation_timestamp": "2026-07-06T22:15:29.198199Z"}, {"uuid": "0ed3993a-fb82-49d2-a602-ea5dad7e4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpz36g6upo2j", "content": "We have two patched kernels ready for testing: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nBoth are serious Linux kernel vulnerabilities. \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-06T21:52:02.280356Z"}, {"uuid": "6442cca6-209a-4444-b54a-626983d1847f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3mpz3apis6k2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]", "creation_timestamp": "2026-07-06T21:53:19.379317Z"}, {"uuid": "8b91e684-ae40-4e48-9be9-1b26d0d0cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-06T22:00:59.348494Z"}, {"uuid": "0c70e8a8-89ee-4e27-bc43-3539f535a3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpz3r7nofn2l", "content": "\ud83d\udd12 Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)\n\nJanuscape (CVE-2026-53359) is a critical KVM escape vulnerability that allows a guest virtual machine to break out and...\n\nhttps://tinyurl.com/24ff7g8a #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-06T22:02:32.492409Z"}, {"uuid": "f39263ef-4f49-4f4d-87c9-4e191b76373a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mpzbyjgsks2h", "content": "Linux Kernel\u306e\u8106\u5f31\u6027(Januscape: CVE-2026-53359)\n\n#security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #linux #kernel #kvm \n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-06T23:54:02.501723Z"}, {"uuid": "206dd3ad-a5a8-4245-8782-cb85556b8a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mpzfhctp77m2", "content": "MT @v4bel@x.com\n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)\n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.\n\n\"16 years\" latent. Successfully used as a 0-day [\u2026]", "creation_timestamp": "2026-07-07T00:56:08.429463Z"}, {"uuid": "e40fe421-e0bb-4585-a670-f755b483b5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-07T01:00:43.309126Z"}, {"uuid": "307733ab-a8a5-4fb2-a6f2-d5a6f1002b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpzg5g3tgy2a", "content": "We have patched kernels ready for testing for two Linux kernel vulnerabilities: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-07T01:08:19.655185Z"}, {"uuid": "dad99e44-ced6-413a-94a5-0eb4e192a5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mpzhml7m6k2r", "content": "MT @v4bel@x.com \n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.  \n\nDetails: januscape.io\n\n#infosec #januscape #kvm", "creation_timestamp": "2026-07-07T01:34:44.076853Z"}, {"uuid": "5a6fe347-9194-4b85-b065-e9f6e9c828ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mpzhvrhlpp24", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] (github.com)\n\nDiscussion | Main Link", "creation_timestamp": "2026-07-07T01:39:50.578595Z"}, {"uuid": "3a34ea56-d8bd-44d2-ade6-633d01d6bd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpzo27sqra2b", "content": "\ud83e\udd16 CVE-2026-53359 ('Januscape'): 16-year-old KVM use-after-free allows guest VM escape to host on Intel/AMD x86. PoC published. Full exploit path suspected.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-07T03:29:42.323328Z"}, {"uuid": "4867ee03-cb0a-40b6-bf0c-a5fde3707293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mpznifdjii2k", "content": "Januscape (CVE-2026-53359): The 16-Year-Old KVM Bug That Lets a Guest VM Take Down Its\u00a0Host\n\nCVE-2026-53359, dubbed Januscape, is a 16-year-old KVM use-after-free letting guest VMs crash or escalate into the host.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-53359-januscape-kvm-guest-to-host-escape/", "creation_timestamp": "2026-07-07T03:19:44.852116Z"}, {"uuid": "7662a00a-c61d-4e17-8ab8-8ed914039195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mpzvg6wlf727", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\n\n github.com -> \n\nCVE-2026-53359\n\n\nOriginal->", "creation_timestamp": "2026-07-07T05:41:40.210484Z"}, {"uuid": "dacdf016-87fc-4246-9f5d-8dbb58a2a4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mq24d5odp22f", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\nhttps://github.com/V4bel/Januscape\n\nhttps://news.ycombinator.com/item?id=48807908", "creation_timestamp": "2026-07-07T07:45:16.450987Z"}, {"uuid": "f8e51e5d-b554-4d97-b13b-a509ffa799fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mq27y7nazd2l", "content": "The Januscape vulnerability (CVE-2026-53359) is a critical use-after-free flaw in KVM/x86 that enables guest-to-host escapes on Intel and AMD hardware. It threatens multi-tenant clouds by allowing host kernel compromise or DoS, requiring immediate kernel patching.", "creation_timestamp": "2026-07-07T08:50:42.470764Z"}, {"uuid": "f1de6583-6710-4c06-a8b1-2e2636e20f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mq2epr65oz2w", "content": "\ud83d\udea8 KVM Januscape vulnerability (CVE-2026-53359) discovered: virtual machines can escape host systems! This critical flaw affects Intel & AMD, existing for 16 years. Already exploited as a 0-day, PoC code out, leading to host kernel panics & privilege escalation. Update your systems ASAP!", "creation_timestamp": "2026-07-07T10:15:27.616625Z"}, {"uuid": "d88d5b36-a54a-45c3-9831-764fe39ab345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq2fneiqzy2m", "content": "CVE-2026-53359 (Januscape) is a KVM shadow MMU use-after-free that enables guest-to-host VM escape and host compromise on Intel and AMD.\n", "creation_timestamp": "2026-07-07T10:32:00.998816Z"}, {"uuid": "8c346c04-2868-4484-906a-52e735a8ef7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/adriend.linuxtricks.fr/post/3mq2iqvo5dk2e", "content": "Pour info, la faille #Januscape (CVE-2026-53359) est une faille de type guest-to-host sur KVM ! \nElle permet d'agir (ici un DoS) sur l'h\u00f4te hyperviseur depuis une machine invit\u00e9 !\nEvidemment OLVM, Proxmox, OVirt, etc reposant sur KVM sont vuln\u00e9rables !\n\ncybersecuritynews.com/16-year-old-...", "creation_timestamp": "2026-07-07T11:27:43.099376Z"}, {"uuid": "4ba3823a-5cbf-4d4c-835e-cd1ead5f9fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116878464186548289", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.https://www.securityweek.com/linux-kernel-vulnerability-allows-vm-escape-on-intel-and-amd-systems/", "creation_timestamp": "2026-07-07T11:30:31.388813Z"}, {"uuid": "b7ce395c-7fc9-4440-ba8c-dd76f1528d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mq2iwllx6s2m", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems.\n\nwww.securityweek.com/linux-kernel...", "creation_timestamp": "2026-07-07T11:30:52.939602Z"}, {"uuid": "eaeb0d8e-e2ae-46ba-b7a2-2361e25fa45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2mbincpo2i", "content": "\ud83d\udcf0 Kerentanan Januscape di Linux Memungkinkan Escape dari Virtual Machine pada Prosesor Intel dan AMD\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/januscape-linux-kvm-vm-escape-vulnerability/\n\n#amd #cve-2026-53359 #intel #januscape #kernelLinux #kvm #linux #virtualMachine #", "creation_timestamp": "2026-07-07T12:30:38.628674Z"}, {"uuid": "2c227699-7559-4d76-9873-f399e59f3c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq2n3sw3ze2b", "content": "Linux kernel flaw CVE-2026-53359, nicknamed Januscape, can let attackers escape KVM VMs and execute code on the host. The shadow MMU bug threatens public clouds and nested virtualization. #Januscape #KVM #IntelAMD", "creation_timestamp": "2026-07-07T12:45:21.825677Z"}, {"uuid": "e102c845-4e6e-41e8-8b1a-716989091445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116878901154624597", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:21:38.881829Z"}, {"uuid": "3d6298ef-dd87-49d1-858b-24c4a6630294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mq2p4un7rre2", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:22:03.824744Z"}, {"uuid": "cf9e6e5c-841d-420c-b39a-74c3f6d8b10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmdnna22p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.059179Z"}, {"uuid": "7736915c-4b99-480c-a2d3-f11991580203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmesfyc2p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.506776Z"}, {"uuid": "bd3ff590-7206-4822-b3ab-75c0fbc75036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/exe.dev/post/3mq2s2kogpk2o", "content": "While we validate a kernel change for januscape (CVE-2026-53359), we have disable nested KVM across our fleet for individuals and teams without dedicated hardware. We will restore nested KVM in a rolling release as soon as we can. Apologies for the inconvenience.", "creation_timestamp": "2026-07-07T14:14:08.453547Z"}, {"uuid": "d12ae95b-73c5-4a50-bcdd-51f180b240b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mq2umu4bpq2p", "content": "Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD.", "creation_timestamp": "2026-07-07T15:00:09.672679Z"}, {"uuid": "5dfe2665-724a-4563-80a8-c4ceb9a222d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mq2vhnt5hc24", "content": "Can a 16-year-old bug really blow up cloud security? Yes. Januscape (CVE-2026-53359) is a Linux KVM flaw allowing VM escape on Intel/AMD. If you run VMs, this zero-day means your host could be compromised. Find out how to protect\u2026\n\nhttps://www.tpp.blog/21opoya\n\n#opensource #januscape #cve202653359", "creation_timestamp": "2026-07-07T15:15:09.234790Z"}, {"uuid": "14e74375-89a6-4944-a917-a4bec526805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wn77tqs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:10.687315Z"}, {"uuid": "80d4205a-f05b-4d99-bed8-3dda5262b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wna6pzs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:11.163997Z"}, {"uuid": "fe8be2b1-684f-4261-9f75-d48d11934848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-07T16:00:45.483193Z"}, {"uuid": "e089ac08-950c-4f89-9422-07ab6d64e883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mq33eolbgi2v", "content": "Januscape (CVE-2026-53359) : une faille use-after-free rest\u00e9e 16 ans dans KVM.\n\nLouez un VPS, activez la virtu imbriqu\u00e9e c\u00f4t\u00e9 h\u00f4te, et une seule VM peut faire tomber l'h\u00f4te + toutes les VM voisines.\n\n\u00c0 patcher \ud83d\udc47\nwww.it-connect.fr/januscape-fa...\n\n#linux", "creation_timestamp": "2026-07-07T17:00:52.410471Z"}, {"uuid": "06848184-41f2-49af-a2d7-0fb5a5d8b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mq34hkw7uz2c", "content": "A 16-year-old flaw in #Linux KVM hypervisor dubbed \"#Januscape\" (CVE-2026-53359) is a Use-After-Free vulnerability which allows guest VMs to escape to the host:\n\nThe fix was merged into the mainline Linux kernel on June 19, 2026:\n\ud83d\udc47", "creation_timestamp": "2026-07-07T17:20:22.686440Z"}, {"uuid": "59fca4b4-500b-4351-a39d-d80a0bab022a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mq3fs4tl3b2f", "content": "A use-after-free vulnerability in Linux's KVM hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows guest VMs to escape to the host on Intel and AMD systems. Discovered by Hyunwoo Kim, the flaw has existed for 16 years and can lead to host code execution.", "creation_timestamp": "2026-07-07T20:07:20.535529Z"}, {"uuid": "ec451422-4923-4b99-91fe-e9fdaf2c8cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-08T01:00:54.120639Z"}, {"uuid": "afc31830-06c4-4f37-84c8-82129b0ac654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq3zp2b35w2o", "content": "\ud83d\udcf0 If you self-host KVM/Proxmox with nested virtualization enabled, check for CVE-2026-53359 patches\n\nA Linux kernel vulnerability, CVE-2026-53359 (\"Januscape\"), affects KVM's shadow paging code w...\n\nhttps://tinyurl.com/2ybvt5yt #TechNews #CrustyTLDR", "creation_timestamp": "2026-07-08T02:03:31.669360Z"}, {"uuid": "ae24d342-82bd-4c99-817d-c5dfbf339ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq5hk3hyhg2c", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-08T15:43:57.810923Z"}, {"uuid": "e738157d-1bdf-49fa-9782-4bb092397066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq56gexppq2d", "content": "Januscape CVE-2026-53359 KVM Vulnerability", "creation_timestamp": "2026-07-08T13:00:49.761364Z"}, {"uuid": "c414a300-0af1-4c39-be22-0d8b8128b52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq56qxxsyg2r", "content": "Januscape CVE-2026-53359 KVM\u306e\u8106\u5f31\u6027\n\n\u4eee\u60f3\u30de\u30b7\u30f3\u306f\u672c\u6765\u3001\u7269\u7406\u30db\u30b9\u30c8\u304b\u3089\u9694\u96e2\u3055\u308c\u305f\u72b6\u614b\u3092\u4fdd\u3064\u3088\u3046\u8a2d\u8a08\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3057\u304b\u3057\u3001Linux\u30ab\u30fc\u30cd\u30eb\u30d9\u30fc\u30b9\u306e\u4eee\u60f3\u30de\u30b7\u30f3(KVM)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u306b\u3088\u308a\u3001\u30b2\u30b9\u30c8OS\u304c\u3053\u306e\u5883\u754c\u3092\u7a81\u7834\u3057\u3001\u30db\u30b9\u30c8\u30ab\u30fc\u30cd\u30eb\u3092\u4fb5\u5bb3\u3067\u304d\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002Januscape\u8106\u5f31\u6027\u3068\u540d\u4ed8\u3051\u3089\u308c\u3001CVE-2026-53359...", "creation_timestamp": "2026-07-08T13:06:45.383461Z"}, {"uuid": "1e0f45d8-42a1-4ece-8e1b-24b08296951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-08T16:01:24.062589Z"}, {"uuid": "0259159e-be10-44fa-b97e-dfb3dcba2e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq64nzj5ou2r", "content": "CVE-2026-53359 (Januscape) in KVM lets untrusted guest VMs on AMD/Intel break out to compromise or crash Linux hosts via guest-side use-after-free memory corruption.\n", "creation_timestamp": "2026-07-08T22:01:59.177100Z"}, {"uuid": "e2977ff3-fd00-4e6f-b5e6-9308220d3584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-09T01:00:49.160584Z"}, {"uuid": "9dc3f41e-16a0-4f4a-9438-c4a12a6d3418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mq7cw73jss2u", "content": "Eine Schwachstelle kann bereits hohe Aufmerksamkeit erhalten, bevor ein CVSS-Score vergeben wurde.\n\nCVE-2026-53359 (Januscape) ist ein aktuelles Beispiel.\n\nDie kostenlose Trending-CVE-\u00dcbersicht von VulnDex zeigt solche Entwicklungen fr\u00fchzeitig.\n\n\ud83d\udc49 vulndex.at/intel/trendi...", "creation_timestamp": "2026-07-09T09:26:36.561853Z"}, {"uuid": "1572756d-d1cd-4cc0-bff1-8fb5715d7d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://gist.github.com/lexfrei/4e8e13137f97b60874350ef2ac512f6d", "content": "# Correctly fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\n## TL;DR\n\nThe config-based mitigation for CVE-2026-53359 that's often recommended \u2014 `machine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0]` \u2014 **is silently ignored on Talos nodes that boot via systemd-boot / UKI** (bare-metal UEFI is the common case). The kernel command line is baked into the signed UKI and cannot be changed by machine config; `grubUseUKICmdline` only affects GRUB.\n\nThe correct fix is to **upgrade to a Talos build whose kernel already contains the patch** \u2014 Linux **6.18.38**, shipped in **Talos v1.13.6** \u2014 which closes **both** CVEs at the kernel level. Then you don't need to disable nested virtualization at all.\n\n## The two CVEs and their fixed kernels\n\nBoth are KVM x86 shadow-paging use-after-free bugs enabling guest-to-host escape:\n\n| CVE | Fixed in the 6.18.x line |\n| --- | --- |\n| CVE-2026-46113 | 6.18.30 |\n| CVE-2026-53359 (Januscape) | 6.18.38 |\n\nStable kernels are cumulative, so **6.18.38 contains both fixes**. Mapping to Talos:\n\n- Talos **v1.13.5** \u2192 kernel 6.18.36 \u2192 fixes only 46113 (NOT 53359).\n- Talos **v1.13.6** \u2192 kernel 6.18.38 \u2192 fixes **both**.\n\nSo bump to **v1.13.6**, not v1.13.5.\n\n## Why the config mitigation fails on systemd-boot\n\nTalos docs, verbatim: *\"the `.machine.install.extraKernelArgs` field is ignored, as kernel arguments are embedded in the UKI and cannot be modified without upgrading the UKI.\"*\n\n- `kvm_intel`/`kvm_amd` are built into the Talos kernel, so `modprobe.d` does nothing and `/sys/module/kvm_intel/parameters/nested` is `0444` (read-only). `nested=` is settable only via the kernel command line.\n- On systemd-boot the cmdline lives inside the signed UKI, so `extraKernelArgs` are dropped \u2014 Talos even warns `extra kernel arguments are not supported when booting using SDBoot`.\n- `grubUseUKICmdline: false` only helps GRUB nodes. On a systemd-boot node, `talosctl upgrade` with these args leaves `/proc/cmdline` unchanged and nested stays on.\n\nSo on systemd-boot nodes, disabling nested via config is not possible \u2014 but you don't need to. Just run a fixed kernel.\n\n## The fix \u2014 upgrade to Talos v1.13.6\n\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), build a Talos Image Factory schematic and upgrade to it. Nothing here requires a custom-built image \u2014 Image Factory assembles the stock installer plus the official extensions declaratively.\n\n### 1. Create a schematic with your extensions\n\n```sh\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n```\n\nTrim the extension list to what your cluster actually uses.\n\n### 2. Upgrade node-by-node\n\n```sh\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n```\n\n`talosctl upgrade` re-runs the installer, rewrites the boot assets and reboots. Roll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Note: Talos only tests migrations between adjacent minors, so from an old release upgrade sequentially through each minor's latest patch (e.g. 1.10 \u2192 1.11 \u2192 1.12 \u2192 1.13) rather than jumping straight.\n\n### 3. Verify\n\n```sh\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n```\n\n`kvm_intel.nested` may stay `Y` \u2014 that is fine; the vulnerable code path is fixed in the kernel.\n\n## Ready example (Cozystack extension set)\n\nA schematic with the standard Cozystack extension set (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\n- Schematic ID: `be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5`\n- Installer: `factory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6`\n\n## References\n\n- CVE-2026-53359 (Januscape): https://nvd.nist.gov/vuln/detail/CVE-2026-53359\n- CVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n- Talos bootloader (GRUB vs systemd-boot, UKI cmdline): https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n- Talos Image Factory: https://factory.talos.dev\n", "creation_timestamp": "2026-07-09T12:33:33.641301Z"}, {"uuid": "00cd7084-b3bc-48df-902a-19bf6a1ebca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq7xybfkwg2e", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-09T15:43:33.867882Z"}, {"uuid": "12ce5815-a5b9-4920-b548-78da0bc13115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqbpbqr7rw2w", "content": "COGNOSCERE Tech Brief \u2014 2026-07-10\n\nJanuscape, CVE-2026-53359, is a use-after-free bug in Linux KVM's shadow MMU dat\n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-10T08:13:06.924327Z"}, {"uuid": "9802b9e8-0f37-4686-825d-45d25554d56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/xceptn.bsky.social/post/3mqcb5tor3v2p", "content": "A recent KVM vulnerability fix - NVD - CVE-2026-53359 nvd.nist.gov/vuln/detail/... #Linux #FOSS #OpenSource #Technology #Security", "creation_timestamp": "2026-07-10T13:33:03.814105Z"}, {"uuid": "c3d8cdcc-303e-4d75-928d-63646e287994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mqcihaubt422", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-10T15:43:34.756956Z"}, {"uuid": "5b35085f-b68f-4e6d-8341-ecec5ccef8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqclyfpnse2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53354 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432?\n\n\n\nhttps://kripta.biz/posts/9B1BF6DA-8B91-4798-BF1F-13CB8CD88CBE", "creation_timestamp": "2026-07-10T16:46:52.145320Z"}, {"uuid": "91a32611-cbbc-45e7-b33e-a6aec65a9d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/116896957268026860", "content": "\ud83c\udd95 Vulnerability-Lookup now imports Microsoft CSAF VEX documents from MSRC \u2014 joining the Red Hat VEX feed as a vendor VEX enrichment source.\nPer-CVE VEX statements (product status, severity) are attached directly to CVE records, visible on the vulnerability page and via the API with the full CSAF documents.\nExample with both Red Hat and Microsoft VEX:https://vulnerability.circl.lu/vuln/CVE-2026-53359#vex\n#VEX #CSAF #VulnerabilityManagement #CVE #OpenSource", "creation_timestamp": "2026-07-10T17:53:34.162676Z"}, {"uuid": "fc5234d7-bf3a-4669-92e1-35f3404e6c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqe7qkiszr2q", "content": "COGNOSCERE Tech Brief \u2014 2026-07-11\n\nCVE-2026-53359, dubbed Januscape, is a use-after-free bug in Linux KVM's shadow \n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-11T08:13:03.528627Z"}, {"uuid": "1e92ec6b-603f-4324-8a80-7557c49d7a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqfutrf5z72l", "content": "Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested\u2026\n\n\ud83d\udd01 RT @v4bel | reposted by @HackingLZ\nhttps://x.com/v4bel/status/2074162435339207141", "creation_timestamp": "2026-07-12T00:03:18.822660Z"}, {"uuid": "b4696590-c066-4e4e-89d2-cbed3f87963f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mqh37nbd5j2w", "content": "A use-after-free bug in Linux KVM (CVE-2026-53359), dubbed Januscape, allows a guest VM to corrupt the host's shadow page state, risking host stability. Public proof-of-concept causes panics.", "creation_timestamp": "2026-07-12T11:29:59.413093Z"}, {"uuid": "8b64ab9c-baa1-4e1f-a86d-a14ceacb2309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-12T13:00:04.217576Z"}, {"uuid": "b85a6d93-1bcd-4756-8dae-4bf858266011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mqhzkzhzb32b", "content": "Introduction A local privilege escalation (LPE) vulnerability affecting the Linux kernel was publicly disclosed on July 6, 2026. The vulnerability was assigned CVE ID CVE-2026-53359 and i...\n\n\ud83d\udd17 https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-12T20:33:13.337012Z"}, {"uuid": "3d0e7842-6df0-42c6-b6eb-82d3c5a2e756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-13T00:00:44.289333Z"}, {"uuid": "4a70e523-41ab-4598-a3c7-720056885de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mqjifxjg2c7u", "content": "Januscape vulnerability CVE-2026-53359 mitigations available | Ubuntu https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-13T10:31:30.228658Z"}, {"uuid": "1ebbd6e0-5807-4242-ba60-f2ae899b26a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqjngi26od2u", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-48282, CVE-2026-50656, CVE-2026-55255, CVE-2026-20896, CVE-2026-53359\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-13T12:01:15.622705Z"}, {"uuid": "c431e30f-c856-465a-9382-30505b9be5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-13T13:00:05.336859Z"}, {"uuid": "2cf418f0-882e-4134-8836-3e4dcbf510e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.268007Z"}, {"uuid": "e212e407-3de1-4080-a644-c44eef83b4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:09.723971Z"}, {"uuid": "7d10f761-b0a5-442e-9a14-e5488b89c36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.171938Z"}, {"uuid": "e007c07a-d230-4706-9ebb-4f5b39d800b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.740346Z"}, {"uuid": "9062b181-7244-4109-bc24-9044b39f41cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.198430Z"}, {"uuid": "a767315b-aeec-4230-8ba1-387e4c917a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.646228Z"}, {"uuid": "9c9eff16-557f-46c9-a18b-be9c51f08c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.724033Z"}, {"uuid": "2bb650ab-5a17-40c7-b81b-c9d09dec93a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.046666Z"}, {"uuid": "cb037f50-3dc7-4333-a9d1-02ed730d1a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.319313Z"}, {"uuid": "a9845fa4-adf3-41e5-921d-074d810dd22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.729219Z"}, {"uuid": "b9eef9ab-ce5d-4b70-9d15-c40f42bc4b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-14T00:00:47.248043Z"}, {"uuid": "982c60ab-1650-4c7d-9698-f97fe9d75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-14T01:00:04.664612Z"}, {"uuid": "199f5271-a6c3-41e8-bf03-608abe08f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.238476Z"}, {"uuid": "81b23dc4-0e05-4271-a2ef-b64297523058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.510051Z"}, {"uuid": "0d8e0edd-638a-4dbe-be93-2938b69c8f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.420800Z"}, {"uuid": "632f4b16-b91f-473f-87a9-7ced14d79faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.675882Z"}, {"uuid": "aa01daad-9d3a-46a8-b16f-70209b4f0d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-15T00:00:35.330580Z"}, {"uuid": "db700f97-1dae-49d9-82d6-844b026a6492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.321877Z"}, {"uuid": "217f4b01-97e8-42ea-9266-42fa1d30c413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.391264Z"}, {"uuid": "268eb721-96fc-4cdb-b518-37e9d81ceac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-15T02:00:04.242266Z"}, {"uuid": "cff7b1ad-a4a5-4514-a7e6-8ce6800b4e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-15T12:00:03.946042Z"}, {"uuid": "63dbf4cc-bc93-4ab3-b1ec-0f7a7f1a064b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-16T00:00:19.694654Z"}, {"uuid": "122d0f3b-f650-467f-9002-8507aad6d9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-16T00:00:20.675744Z"}, {"uuid": "97726b66-ff05-43bc-bb18-f6ce4efea19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/sagalinked.bsky.social/post/3mqqjybbg2g2a", "content": "\ud83d\udcf0 Januscape, an open-source tool for guest-to-host escape attacks in KVM/x86 systems, has been identified as vulnerable to a critical security flaw (CVE-2026-53359), potentially allowing attackers to gain unauthorized access to host machines.\n\n\ud83d\udd17 https://github.com/V4bel/Januscape\n\n#Tech #Dev", "creation_timestamp": "2026-07-16T05:48:16.478294Z"}, {"uuid": "9a958355-7c38-4ff1-9895-fe28cf0906a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93551", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a almalinux-januscape-mitigation\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x024n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:47:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPanduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.448996Z"}, {"uuid": "531523d7-9a3d-4bee-9e42-588dd6dd2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/93525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ndouglas-cloudsmith\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 11:46:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:05.783569Z"}, {"uuid": "b465f0ed-f6e4-49b2-ac45-8f49281e32a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-16T19:00:05.773781Z"}, {"uuid": "b51191c2-b8c1-4ed5-a221-265cf4691a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-16T19:00:06.187024Z"}, {"uuid": "4ae109dc-a0d2-4bc5-baf9-3be2f5dce6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "content": "", "creation_timestamp": "2026-07-16T19:00:06.411397Z"}, {"uuid": "59c2891e-08ec-43e4-8e9d-3bb8ee11850d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-16T19:00:17.466220Z"}, {"uuid": "f3f489f1-6052-45a2-960a-3268f9bbd826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:18.914534Z"}, {"uuid": "2c58e3e3-85d8-4721-ae1b-46e5cdd984e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-16T19:00:18.486026Z"}, {"uuid": "33f5ae63-ce23-46fb-b665-d00d43b90407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-16T19:00:20.091878Z"}, {"uuid": "37641031-d61a-4dd9-946a-369af3c0b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-16T19:00:15.233093Z"}, {"uuid": "f19bd553-1f7f-47bf-bf16-572f3333fa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-16T19:00:18.616578Z"}, {"uuid": "d799dd98-e604-416f-bca0-ff51ce34058e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "content": "", "creation_timestamp": "2026-07-17T00:00:25.196981Z"}, {"uuid": "e1cce2ef-2c36-4019-8ff1-c74c3a839d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-17T00:00:25.687186Z"}, {"uuid": "e25701f8-280d-4b35-8a77-bb94df1b023d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-17T00:00:35.964032Z"}, {"uuid": "37144287-cb0d-4033-9ce4-4f1bab486ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-17T00:00:36.447461Z"}, {"uuid": "50766dd6-3c2e-4837-872d-a514b3c84e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-17T00:00:11.611881Z"}, {"uuid": "8a59f0e3-ac1b-497d-9771-b0a867f5bcef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-17T00:00:30.665732Z"}, {"uuid": "45b9b0e9-44b5-4d97-923a-b130204c3066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-17T00:00:34.242118Z"}, {"uuid": "ace96b04-0aa7-4505-bb3d-b47449861db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-17T00:00:33.116090Z"}, {"uuid": "500344d0-79f4-40bb-a6b8-75bd4bb39228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-17T00:00:35.645843Z"}, {"uuid": "8126b07a-731f-4732-998f-e033d6ba91cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/93525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ndouglas-cloudsmith\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 11:46:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.408009Z"}, {"uuid": "e0759885-2c20-4478-b36d-b32624255d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93551", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a almalinux-januscape-mitigation\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x024n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:47:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPanduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.606425Z"}, {"uuid": "1ea9b0c2-e1bc-4655-a12e-43ac50980717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/gihyo.jp/post/3mqsmngsn6d2w", "content": "Ubuntu Weekly Topics\u300cUbuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u2060\u2060\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56\u300d\u516c\u958b #ubuntujp gihyo.jp/admin/clip/0...", "creation_timestamp": "2026-07-17T01:41:13.573952Z"}, {"uuid": "abc9e171-e336-4829-8bd8-747d6d4f4f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3mqsrthudkh2l", "content": "Ubuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56 | gihyo.jp", "creation_timestamp": "2026-07-17T03:14:04.535499Z"}, {"uuid": "98b391d8-109e-4ef3-861e-eb5258304e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mqt7f5pzok2q", "content": "Januscape CVE-2026-53359: KVM Vulnerability Patches and Mitigations\nquasa.io/media/janusc...\nJanuscape (CVE-2026-53359) is a use-after-free vulnerability in the Linux kernel's KVM/x86 shadow MMU that affects nested virtualization on Intel and AMD x86_64 systems.", "creation_timestamp": "2026-07-17T07:16:41.335904Z"}, {"uuid": "f80b89cd-7638-47b2-9037-ba9a6c3a2a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/nilab.bsky.social/post/3mqte6y4d622o", "content": "\u300c\u201c\u2060linux-vmware\u2060\u201d\u3068\u3044\u3046\u30d5\u30ec\u30fc\u30d0\u30fc\u306e\u30ab\u30fc\u30cd\u30eb\u304c\u5b9a\u671f\u7684\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u304a\u305d\u3089\u304fVMware\u74b0\u5883\u5411\u3051\u306e\u5c02\u7528\u30ab\u30fc\u30cd\u30eb\u3068\u601d\u308f\u308c\u307e\u3059\u304c\u3001\u6b63\u5f0f\u306a\u30ea\u30ea\u30fc\u30b9\u3084\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u307e\u3060\u5b58\u5728\u3057\u3066\u3044\u307e\u305b\u3093\u300d\n\nUbuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56 | gihyo jp gihyo.jp/admin/clip/0...", "creation_timestamp": "2026-07-17T08:42:39.135172Z"}, {"uuid": "5d2a7205-e214-4658-9c23-98bfffc6fa7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/S_E_Reborn/6467", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-17T12:00:05.837922Z"}, {"uuid": "f595ddd2-95bf-4b88-9020-c5c8c5b39b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-18T00:00:24.666721Z"}, {"uuid": "6a4f4637-bad2-47a4-8b0a-5627615cc911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-18T00:00:23.988861Z"}, {"uuid": "06e5356a-dd97-4756-991e-e29f72ba876e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-18T00:00:25.047672Z"}, {"uuid": "ea279dce-eb44-4c44-b5c6-63b93959d6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/S_E_Reborn/6467", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-18T00:00:32.213272Z"}, {"uuid": "e97a731c-cba6-41c8-b15f-48874e8300b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-18T00:00:33.356304Z"}, {"uuid": "99bfa379-ff99-4e9c-9e9b-9a673b0bb12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-18T00:00:42.231701Z"}, {"uuid": "d3f1c5b4-3f94-4e82-9bea-5b53e9e50266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T01:00:10.858941Z"}, {"uuid": "77756258-4ec6-4871-a5a3-d44ddbbb278a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/lpjVqn-gGFFXmyIQryBtHjN9Rm2dNH7ag2qkpq69veYk7w", "content": "", "creation_timestamp": "2026-07-18T13:00:04.124236Z"}, {"uuid": "7c4733b1-1cbf-4776-9728-3ef428ddea79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mqwtqrk6d22z", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\nHyunwoo Kim published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected.\n\ngithub.com/V4bel/Janusc...", "creation_timestamp": "2026-07-18T17:59:19.017938Z"}, {"uuid": "6fec439e-9e1d-4388-b261-867b4ff44b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mqwtqva3r22z", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\nHyunwoo Kim published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected.\n\ngithub.com/V4bel/Janusc...", "creation_timestamp": "2026-07-18T17:59:19.455855Z"}, {"uuid": "8f969e29-6172-4898-a40f-4bb5f84bb8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/lpjVqn-gGFFXmyIQryBtHjN9Rm2dNH7ag2qkpq69veYk7w", "content": "", "creation_timestamp": "2026-07-19T00:00:27.859636Z"}, {"uuid": "935a1b01-66c3-4e7c-9b7a-915482d57790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/edwing.mstdn.moimeme.ca/post/3mr35w2x56xa2", "content": "Turns out, OVH had to patch all their hypervisors because of a vulnerability in KVM. This did lead to service disruptions to their customers.\n\nhttps://blog.ovhcloud.com/cve-2026-53359-januscape-patching-campaign-lessons-learned-from-remediating-a-kvm-flaw-across-tens-of-thousands-of-machines/\n- [\u2026]", "creation_timestamp": "2026-07-20T11:13:08.576312Z"}, {"uuid": "0b6fee8f-f110-4b19-9cfa-215c8db72e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-20T18:00:13.193437Z"}, {"uuid": "694e25a2-cb9a-4361-9b17-af16f797e81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-21T00:00:36.050126Z"}, {"uuid": "7e72953e-b365-4ccc-9f68-0bd8a6769e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5f5zyblq2w", "content": "OVH patched CVE-2026-53359, a critical KVM flaw, across tens of thousands of hosts in under 10 days without warning most clients first.\n\n#OVHcloud #CVE202653359 #KVM #LinuxKernel #CloudSecurity", "creation_timestamp": "2026-07-21T08:26:37.688825Z"}, {"uuid": "a9023f80-fa4f-4cd3-b659-63c9ac5c2688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-22T01:00:04.225410Z"}, {"uuid": "10d08ff3-1e56-4710-bb76-34b030a6f1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d", "content": "\ud83d\udd17 CVE : CVE-2025-23131, CVE-2026-23272, CVE-2026-23278, CVE-2026-23302, CVE-2026-31451, CVE-2026-46252, CVE-2026-52928, CVE-2026-53138, CVE-2026-53139, CVE-2026-53157, CVE-2026-53158, CVE-2026-53163, CVE-2026-53167, CVE-2026-53325, CVE-2026-53327, CVE-2026-53359, CVE-2026-53362, CVE-2026-53366", "creation_timestamp": "2026-07-24T13:25:32.115200Z"}, {"uuid": "8eacd398-291d-48be-b9bc-57cfdd275b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ZerodayAlert/751", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.932571Z"}, {"uuid": "22274c43-8ccd-4044-a307-2c1efb9898e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ZerodayAlert/751", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.709444Z"}, {"uuid": "b46f2880-50b2-4f6d-bb2e-59cded91241d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/cyberwarehouse/1158", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T07:00:05.450319Z"}, {"uuid": "a71ad500-537d-49ea-a14e-3b66d6e673c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/cyberwarehouse/1158", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-27T00:00:34.991998Z"}, {"uuid": "10ca8397-fbc0-4dd0-a256-912efc3db9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/x-n0ylXESV0VMQn7dfRNSBcrcNynpmfUXh9w9EUT5ZseMLA", "content": "", "creation_timestamp": "2026-07-29T12:00:04.300550Z"}, {"uuid": "9f7446d7-16d2-4dc6-8f55-298026047964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/427", "content": "\ud83d\udc7bThird CVE this week, but good news: Cozystack isn't exposed by design and the fix is the same v1.13.6 upgrade you already know. Details below\ud83d\udc47\n\nSecurity Advisory: CVE-2026-43499 (\"GhostLock\") \u2014 Cozystack Exposure Assessment\nOn July 7, 2026, a critical Linux kernel local privilege escalation \u2014 CVE-2026-43499 (\"GhostLock\") \u2014 was disclosed with a working proof-of-concept. It is a stack use-after-free in the kernel real-time mutex (rtmutex) priority-inheritance path, reachable from futex(2): on the proxy-lock rollback taken from futex_requeue(), remove_waiter() clears pi_blocked_on on the wrong task, leaving a dangling pointer to a freed kernel stack frame. Introduced in Linux 2.6.39 (2011), it affects every kernel up to v7.1-rc1, needs only CONFIG_FUTEX_PI=y (no capabilities, no user namespaces), and can be escalated into a container escape \u2014 an unprivileged local process reaching root on the host kernel.\n\nThe upstream fix is commit 3bfdc63936dd, shipped in stable kernels 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4.\n\nReference: https://nvd.nist.gov/vuln/detail/CVE-2026-43499\n\nConfirmed not affected\nGhostLock is a local escalation: it presupposes the attacker can already run native code on the host kernel's syscall surface. By design, Cozystack gives tenants no way to do that.\n\nManaged Kubernetes and VirtualMachine services. All tenant workloads execute inside guest virtual machines running on top of unprivileged containers. Tenant code has no direct access to the host kernel syscall surface \u2014 a futex sequence issued inside a guest reaches the guest kernel, not the host.\n\nManaged databases run as non-root, non-superuser users, with no Kubernetes API access and no ability to execute arbitrary code in the server process, so a tenant cannot issue the syscall sequence the exploit requires.\n\nNo arbitrary tenant code on the management cluster. Cozystack exposes only the managed services we provide \u2014 there is no surface on which a tenant runs arbitrary native code in a container on a management node.\nBy the design of Cozystack, we currently do not see any viable attack path that would allow a tenant to reach the host kernel surface affected by this vulnerability.\n\nRecommended action \u2014 same as Januscape: upgrade the kernel\nThe vulnerability is confirmed in current Talos Linux releases, and any future regression in the isolation above could re-expose it \u2014 so we recommend applying the kernel fix regardless.\n\nGhostLock is fixed in Talos Linux v1.13.6 (kernel 6.18.38-talos, newer than the first fixed 6.18.27). This is the same upgrade we recommended for CVE-2026-53359 (\"Januscape\") and CVE-2026-46113 \u2014 one move to v1.13.6 closes all three.\n\nAlready upgraded to v1.13.6 for Januscape? You are protected \u2014 no further action needed.\nNot yet? Follow the same runbook: build an Image Factory installer with your extensions, upgrade node-by-node to v1.13.6, and verify talosctl read /proc/sys/kernel/osrelease shows 6.18.38-talos. Move one node at a time, waiting for etcd quorum and storage health between control-plane nodes.\nIf you cannot upgrade immediately, kernel.randomize_kstack_offset=1 (via machine.sysctls) reduces the exploit's reliability as a defense-in-depth measure \u2014 not a substitute for the fix.\n\nWe will update this advisory as fixed releases and further mitigations are confirmed.", "creation_timestamp": "2026-07-29T12:00:04.361628Z"}, {"uuid": "cff6eae5-944b-4847-83e3-e85173a30853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/426", "content": "\ud83d\udc8a Fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\nContext\nCVE-2026-53359 (Januscape) and CVE-2026-46113 are KVM x86 shadow-paging use-after-free bugs that let a guest VM escape to the host. Both are fixed in Linux 6.18.38, which ships in Talos v1.13.6. Upgrading to it closes both at the kernel level \u2014 you do not need to disable nested virtualization.\n\nThe commonly suggested config mitigation:\nmachine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0] \u2014 is silently ignored on systemd-boot / UKI nodes (the usual bare-metal UEFI case):\n\nkvm_intel/kvm_amd are built into the Talos kernel, so modprobe.d and runtime /sys writes don\u2019t apply (/sys/module/kvm_intel/parameters/nested is 0444); nested= is settable only via the kernel command line.\nOn systemd-boot the cmdline is baked into the signed UKI, so extraKernelArgs are dropped (Talos warns extra kernel arguments are not supported when booting using SDBoot). grubUseUKICmdline: false only helps GRUB nodes.\n\nSo the fix is a kernel bump, not a config knob.\n\nRunbook\n\n1. Build an Image Factory schematic with your extensions\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), declare them \u2014 Image Factory assembles the stock installer plus the official extensions, no custom image build required.\n\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n\nTrim the extension list to what your cluster actually uses.\n\n2. Upgrade node-by-node\n\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n\nRoll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Talos only tests migrations between adjacent minors \u2014 from an old release, upgrade sequentially through each minor\u2019s latest patch rather than jumping straight.\n\n3. Verify\n\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n\nkvm_intel.nested may stay Y \u2014 that\u2019s expected; the vulnerable path is fixed in the kernel.\n\nReady installer (Cozystack extension set)\n\nStandard Cozystack extensions (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\nfactory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6\n\nReferences:\n\nCVE-2026-53359 (Januscape): \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53359\nCVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n\nTalos bootloader / UKI cmdline: https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n\nTalos Image Factory: https://factory.talos.dev", "creation_timestamp": "2026-07-29T12:00:04.471177Z"}, {"uuid": "9c053dbf-22b5-44e1-94f8-8aa11777f0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/420", "content": "\ud83d\udea8\u00a0Security Advisory \u2014 CVE-2026-53359\u00a0(\"Januscape\"): KVM guest-to-host escape\n\n\u00b7 Severity:\u00a0High\n\u00b7 Status:\u00a0Mitigation required now\n\nWhat happened\n\nOn 2026-07-06 a Linux kernel vulnerability, CVE-2026-53359\u00a0(\"Januscape\"), was publicly disclosed together with a working exploit. It is a use-after-free in the KVM/x86 shadow MMU that lets a guest VM break out to its host (the cluster node) or crash the node's kernel. It affects both Intel and AMD CPUs and has been latent in the kernel since 2010.\n\nThe upstream fix shipped in stable kernels (6.18.38, 6.12.95, 6.6.144, 6.1.177, 7.1.3) on 2026-07-04, but Talos Linux has not yet released an image with the fixed kernel. Every current Talos version still runs a vulnerable kernel.\n\nWho is affected\n\nCozystack installations that run virtualization or tenant Kubernetes clusters \u2014 tenant Kubernetes nodes are KubeVirt VMs, so they count. If you run only containerized workloads and never create VMs or tenant clusters, your exposure is much lower.\n\nThe risk\n\nThe exploit needs two things a tenant already has: root inside their own VM, and nested virtualization exposed to the guest (on by default). A malicious tenant could then:\n\n\u00b7 crash the node kernel, taking down every co-tenant VM on that node (denial of service), or\n\n\u00b7 with a working exploit, run code on the node and compromise the cluster.\n\nKubeVirt's sandboxing (unprivileged containers, seccomp, SELinux) does not stop this \u2014 the bug is in the host kernel and is reached through the normal KVM interface every VM must use.\n\nRecommended mitigation: disable nested virtualization\n\nCozystack VMs do not need nested virtualization. Disabling it removes the attack surface entirely, regardless of kernel version.\n\nTalos (most clusters)\n\nAdd to your Talos machine config, under machine.install:\n\n  install:\n    # Talos >= 1.12 only: pin grubUseUKICmdline false so the args are applied\n    # (otherwise they are silently ignored on UEFI/UKI systems).\n    grubUseUKICmdline: false\n    extraKernelArgs:\n    - kvm_intel.nested=0\n    - kvm_amd.nested=0\n\nBoth lines are safe on Intel and AMD \u2014 the one that does not match your CPU is ignored. On Talos older than 1.12 the grubUseUKICmdline field does not exist and extraKernelArgs is ignored on UEFI/UKI nodes; there the args must be baked into the boot image via Image Factory.\n\nApply it in two steps \u2014 talm apply, then\u00a0talm upgrade. First push the updated machine config to the node, then re-run the Talos installer so the kernel arguments are written into the boot configuration (a plain talm apply\u00a0alone does not rewrite the boot config). You can upgrade to the same Talos version you are already on \u2014 the point is to re-run the installer with the new arguments:\n\n# 1. Push the updated machine config to the node\ntalm apply -f nodes/.yaml\n\n# 2. Re-run the installer so the kernel args land in the boot config (this reboots the node)\ntalm upgrade -f nodes/.yaml\n\u26a0\ufe0f\u00a0This reboots the node.\u00a0Roll it out one node at a time, waiting for each node to become Ready\u00a0(and for etcd quorum to recover on control-plane nodes) before moving to the next.\n\nGeneric Linux hosts (non-Talos)\n\nCreate /etc/modprobe.d/cozystack-kvm-nested.conf:\n\nundefined\noptions kvm_intel nested=0\noptions kvm_amd nested=0\nThen reboot the node (or reload the\u00a0kvm\u00a0module) for it to take effect.\n\nAutomation\n\nWe have updated our Cozystack Claude Code skills to prescribe and verify this mitigation during bootstrap and upgrades, so the setting is placed under machine.install and persists across future Talos upgrades:\n\n\u2192 https://github.com/cozystack/ccp/pull/17\n\nYou can use the\u00a0cozystack:talos-bootstrap\u00a0and cozystack:cluster-upgrade\u00a0skills to apply and verify the change automatically.\n\nAfter a fixed Talos ships\nOnce Talos releases an image with the patched kernel (6.18.38 or newer), upgrade normally. You may keep nested virtualization disabled as a hardening measure, or re-enable it (remove the two arguments) if a specific workload requires it. We will notify you when a fixed Talos release is available.", "creation_timestamp": "2026-07-29T12:00:04.537631Z"}, {"uuid": "e4b6e207-f5bb-4254-ba30-35c5b598311b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/425", "content": "\ud83d\udee0 Update on CVE-2026-53359 (\"Januscape\"): the proper fix is here\n\nHi everyone. Our earlier mitigation was a hotfix, a temporary and forced measure. The proper fix is now available, so the hotfix is no longer needed.\n\nTL;DR: Disabling nested virtualization is no longer needed. It was a hotfix, and for some setups it wasn't even possible. The real fix is a kernel bump.\n\nIf you already applied it, roll it back and upgrade instead.\n\nGeneric Linux: make sure you're on Linux 6.18.38 or newer (with the fixes).\nSafe kernel versions across all branches:\n6.1.177 \u00b7 6.6.144 \u00b7 6.12.95 \u00b7 6.18.38 \u00b7 7.1.3 \u00b7 7.2-rc1\n\nFor Talos, follow the runbook below\ud83d\udc47", "creation_timestamp": "2026-07-29T12:00:04.571547Z"}, {"uuid": "d28ce862-f002-4198-bd16-dcf1f1d983cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-07-29T12:01:46.787935Z"}, {"uuid": "fcd5fcc2-3d3f-4c01-ae42-dc477b014fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/aenix_io/420", "content": "\ud83d\udea8\u00a0Security Advisory \u2014 CVE-2026-53359\u00a0(\"Januscape\"): KVM guest-to-host escape\n\n\u00b7 Severity:\u00a0High\n\u00b7 Status:\u00a0Mitigation required now\n\nWhat happened\n\nOn 2026-07-06 a Linux kernel vulnerability, CVE-2026-53359\u00a0(\"Januscape\"), was publicly disclosed together with a working exploit. It is a use-after-free in the KVM/x86 shadow MMU that lets a guest VM break out to its host (the cluster node) or crash the node's kernel. It affects both Intel and AMD CPUs and has been latent in the kernel since 2010.\n\nThe upstream fix shipped in stable kernels (6.18.38, 6.12.95, 6.6.144, 6.1.177, 7.1.3) on 2026-07-04, but Talos Linux has not yet released an image with the fixed kernel. Every current Talos version still runs a vulnerable kernel.\n\nWho is affected\n\nCozystack installations that run virtualization or tenant Kubernetes clusters \u2014 tenant Kubernetes nodes are KubeVirt VMs, so they count. If you run only containerized workloads and never create VMs or tenant clusters, your exposure is much lower.\n\nThe risk\n\nThe exploit needs two things a tenant already has: root inside their own VM, and nested virtualization exposed to the guest (on by default). A malicious tenant could then:\n\n\u00b7 crash the node kernel, taking down every co-tenant VM on that node (denial of service), or\n\n\u00b7 with a working exploit, run code on the node and compromise the cluster.\n\nKubeVirt's sandboxing (unprivileged containers, seccomp, SELinux) does not stop this \u2014 the bug is in the host kernel and is reached through the normal KVM interface every VM must use.\n\nRecommended mitigation: disable nested virtualization\n\nCozystack VMs do not need nested virtualization. Disabling it removes the attack surface entirely, regardless of kernel version.\n\nTalos (most clusters)\n\nAdd to your Talos machine config, under machine.install:\n\n  install:\n    # Talos >= 1.12 only: pin grubUseUKICmdline false so the args are applied\n    # (otherwise they are silently ignored on UEFI/UKI systems).\n    grubUseUKICmdline: false\n    extraKernelArgs:\n    - kvm_intel.nested=0\n    - kvm_amd.nested=0\n\nBoth lines are safe on Intel and AMD \u2014 the one that does not match your CPU is ignored. On Talos older than 1.12 the grubUseUKICmdline field does not exist and extraKernelArgs is ignored on UEFI/UKI nodes; there the args must be baked into the boot image via Image Factory.\n\nApply it in two steps \u2014 talm apply, then\u00a0talm upgrade. First push the updated machine config to the node, then re-run the Talos installer so the kernel arguments are written into the boot configuration (a plain talm apply\u00a0alone does not rewrite the boot config). You can upgrade to the same Talos version you are already on \u2014 the point is to re-run the installer with the new arguments:\n\n# 1. Push the updated machine config to the node\ntalm apply -f nodes/.yaml\n\n# 2. Re-run the installer so the kernel args land in the boot config (this reboots the node)\ntalm upgrade -f nodes/.yaml\n\u26a0\ufe0f\u00a0This reboots the node.\u00a0Roll it out one node at a time, waiting for each node to become Ready\u00a0(and for etcd quorum to recover on control-plane nodes) before moving to the next.\n\nGeneric Linux hosts (non-Talos)\n\nCreate /etc/modprobe.d/cozystack-kvm-nested.conf:\n\nundefined\noptions kvm_intel nested=0\noptions kvm_amd nested=0\nThen reboot the node (or reload the\u00a0kvm\u00a0module) for it to take effect.\n\nAutomation\n\nWe have updated our Cozystack Claude Code skills to prescribe and verify this mitigation during bootstrap and upgrades, so the setting is placed under machine.install and persists across future Talos upgrades:\n\n\u2192 https://github.com/cozystack/ccp/pull/17\n\nYou can use the\u00a0cozystack:talos-bootstrap\u00a0and cozystack:cluster-upgrade\u00a0skills to apply and verify the change automatically.\n\nAfter a fixed Talos ships\nOnce Talos releases an image with the patched kernel (6.18.38 or newer), upgrade normally. You may keep nested virtualization disabled as a hardening measure, or re-enable it (remove the two arguments) if a specific workload requires it. We will notify you when a fixed Talos release is available.", "creation_timestamp": "2026-07-30T00:00:31.318827Z"}, {"uuid": "a5083e50-5910-4797-a66f-8de5fb08b92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/426", "content": "\ud83d\udc8a Fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\nContext\nCVE-2026-53359 (Januscape) and CVE-2026-46113 are KVM x86 shadow-paging use-after-free bugs that let a guest VM escape to the host. Both are fixed in Linux 6.18.38, which ships in Talos v1.13.6. Upgrading to it closes both at the kernel level \u2014 you do not need to disable nested virtualization.\n\nThe commonly suggested config mitigation:\nmachine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0] \u2014 is silently ignored on systemd-boot / UKI nodes (the usual bare-metal UEFI case):\n\nkvm_intel/kvm_amd are built into the Talos kernel, so modprobe.d and runtime /sys writes don\u2019t apply (/sys/module/kvm_intel/parameters/nested is 0444); nested= is settable only via the kernel command line.\nOn systemd-boot the cmdline is baked into the signed UKI, so extraKernelArgs are dropped (Talos warns extra kernel arguments are not supported when booting using SDBoot). grubUseUKICmdline: false only helps GRUB nodes.\n\nSo the fix is a kernel bump, not a config knob.\n\nRunbook\n\n1. Build an Image Factory schematic with your extensions\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), declare them \u2014 Image Factory assembles the stock installer plus the official extensions, no custom image build required.\n\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n\nTrim the extension list to what your cluster actually uses.\n\n2. Upgrade node-by-node\n\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n\nRoll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Talos only tests migrations between adjacent minors \u2014 from an old release, upgrade sequentially through each minor\u2019s latest patch rather than jumping straight.\n\n3. Verify\n\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n\nkvm_intel.nested may stay Y \u2014 that\u2019s expected; the vulnerable path is fixed in the kernel.\n\nReady installer (Cozystack extension set)\n\nStandard Cozystack extensions (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\nfactory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6\n\nReferences:\n\nCVE-2026-53359 (Januscape): \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53359\nCVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n\nTalos bootloader / UKI cmdline: https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n\nTalos Image Factory: https://factory.talos.dev", "creation_timestamp": "2026-07-30T00:00:31.363671Z"}, {"uuid": "57f6c70f-c72e-4c17-a771-c598d093fd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/427", "content": "\ud83d\udc7bThird CVE this week, but good news: Cozystack isn't exposed by design and the fix is the same v1.13.6 upgrade you already know. Details below\ud83d\udc47\n\nSecurity Advisory: CVE-2026-43499 (\"GhostLock\") \u2014 Cozystack Exposure Assessment\nOn July 7, 2026, a critical Linux kernel local privilege escalation \u2014 CVE-2026-43499 (\"GhostLock\") \u2014 was disclosed with a working proof-of-concept. It is a stack use-after-free in the kernel real-time mutex (rtmutex) priority-inheritance path, reachable from futex(2): on the proxy-lock rollback taken from futex_requeue(), remove_waiter() clears pi_blocked_on on the wrong task, leaving a dangling pointer to a freed kernel stack frame. Introduced in Linux 2.6.39 (2011), it affects every kernel up to v7.1-rc1, needs only CONFIG_FUTEX_PI=y (no capabilities, no user namespaces), and can be escalated into a container escape \u2014 an unprivileged local process reaching root on the host kernel.\n\nThe upstream fix is commit 3bfdc63936dd, shipped in stable kernels 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4.\n\nReference: https://nvd.nist.gov/vuln/detail/CVE-2026-43499\n\nConfirmed not affected\nGhostLock is a local escalation: it presupposes the attacker can already run native code on the host kernel's syscall surface. By design, Cozystack gives tenants no way to do that.\n\nManaged Kubernetes and VirtualMachine services. All tenant workloads execute inside guest virtual machines running on top of unprivileged containers. Tenant code has no direct access to the host kernel syscall surface \u2014 a futex sequence issued inside a guest reaches the guest kernel, not the host.\n\nManaged databases run as non-root, non-superuser users, with no Kubernetes API access and no ability to execute arbitrary code in the server process, so a tenant cannot issue the syscall sequence the exploit requires.\n\nNo arbitrary tenant code on the management cluster. Cozystack exposes only the managed services we provide \u2014 there is no surface on which a tenant runs arbitrary native code in a container on a management node.\nBy the design of Cozystack, we currently do not see any viable attack path that would allow a tenant to reach the host kernel surface affected by this vulnerability.\n\nRecommended action \u2014 same as Januscape: upgrade the kernel\nThe vulnerability is confirmed in current Talos Linux releases, and any future regression in the isolation above could re-expose it \u2014 so we recommend applying the kernel fix regardless.\n\nGhostLock is fixed in Talos Linux v1.13.6 (kernel 6.18.38-talos, newer than the first fixed 6.18.27). This is the same upgrade we recommended for CVE-2026-53359 (\"Januscape\") and CVE-2026-46113 \u2014 one move to v1.13.6 closes all three.\n\nAlready upgraded to v1.13.6 for Januscape? You are protected \u2014 no further action needed.\nNot yet? Follow the same runbook: build an Image Factory installer with your extensions, upgrade node-by-node to v1.13.6, and verify talosctl read /proc/sys/kernel/osrelease shows 6.18.38-talos. Move one node at a time, waiting for etcd quorum and storage health between control-plane nodes.\nIf you cannot upgrade immediately, kernel.randomize_kstack_offset=1 (via machine.sysctls) reduces the exploit's reliability as a defense-in-depth measure \u2014 not a substitute for the fix.\n\nWe will update this advisory as fixed releases and further mitigations are confirmed.", "creation_timestamp": "2026-07-30T00:00:31.455910Z"}, {"uuid": "b5f084da-b925-4497-be3e-60520785a614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/x-n0ylXESV0VMQn7dfRNSBcrcNynpmfUXh9w9EUT5ZseMLA", "content": "", "creation_timestamp": "2026-07-30T00:00:32.069248Z"}, {"uuid": "8bc8df22-b89e-43af-a861-6b1280c5c37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-07-30T00:02:02.724928Z"}]}