{"vulnerability": "CVE-2026-53359", "sightings": [{"uuid": "6beeb024-2bf0-44b6-99f8-cc50bfae577d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpttwie53x23", "content": "CVE-2026-53359 - KVM: x86: Fix shadow paging use-after-free due to unexpected role\nCVE ID : CVE-2026-53359\n \n Published : July 4, 2026, 12:17 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shad...", "creation_timestamp": "2026-07-04T19:59:00.967681Z"}, {"uuid": "0e68c368-0ccc-4561-8566-ba9dd0db3554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpunaasf442y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/F9CDFDE2-37AC-4BC1-839E-6020F968C338", "creation_timestamp": "2026-07-05T03:31:57.012156Z"}, {"uuid": "dd794a68-2a04-4caf-bed5-8060931740c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116865551315118647", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53359) https://vuldb.com/vuln/376323", "creation_timestamp": "2026-07-05T04:46:36.638474Z"}, {"uuid": "5e930966-8f18-4944-a368-dd30a87125bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/askfred.be/post/3mpuz3gyt2z23", "content": "I had to sit with the latest Linux stable kernel releases for a minute. Greg Kroah-Hartman pushed out seven updates, and tucked inside is a fix for a KVM use-after-free vulnerability (CVE-2026-53359) that was actually introduced all the way back in kernel version 2.6.36.", "creation_timestamp": "2026-07-05T07:03:55.698929Z"}, {"uuid": "5d8147d5-dedb-4636-ada4-935b17f1763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:31.960797Z"}, {"uuid": "52accd86-6905-42c0-9d2d-50990cf612e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116874019977365878", "content": "Oh, goodie. KVM Guest-to-Host escape\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:18.875429Z"}, {"uuid": "09c98d49-f641-401e-a4ad-e71ba71980d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mpyjr3o4weo2", "content": "Oh, goodie. KVM Guest-to-Host escape\n\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\n\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:38.808871Z"}, {"uuid": "4e6681fb-052a-46f5-97f2-9d25f5b3e4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpykhay4su2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)", "creation_timestamp": "2026-07-06T16:52:45.031950Z"}, {"uuid": "de18a5ba-b247-4d0d-90a2-6e050acf5be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpyl7a53oo26", "content": "Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.\n\n#Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day", "creation_timestamp": "2026-07-06T17:06:09.848148Z"}, {"uuid": "6d4b7857-11cd-4017-b8a8-dc1522530eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874224446929748", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: A Long-Lived KVM Bug Resurfaces: Shadow Paging Use-After-Free in the Linux Kernel (CVE-2026-53359)\nLink: https://darkwebinformer.com/a-long-lived-kvm-bug-resurfaces-shadow-paging-use-after-free-in-the-linux-kernel-cve-2026-53359/", "creation_timestamp": "2026-07-06T17:32:18.225958Z"}, {"uuid": "c56690b2-9f13-46bb-a324-740224bdb464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mpyp5ldmoa2q", "content": "A guest-to-host VM escape exploit against KVM on x86 (CVE-2026-53359), released open source with a writeup.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fgithub.com%2FV4bel%2FJanuscape&amp;t=Januscape%3A%20Guest-to-Host%20Escape%20in%20KVM%2Fx86%20%5BCVE-2026-53359%5D", "creation_timestamp": "2026-07-06T18:16:49.470749Z"}, {"uuid": "542a9219-7fe5-4192-9df3-f422f0047346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mpypvjfaoc2v", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\ncomments \u00b7 posted on 2026.07.06 at 13:35:03 (c=1, p=5)", "creation_timestamp": "2026-07-06T18:30:12.440323Z"}, {"uuid": "b25f3bd0-cb8b-4f92-a7be-431bfcee9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mpypwr5whs2z", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nhttps://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-06T18:30:53.961579Z"}, {"uuid": "84225216-99ed-4661-8748-1942f0eff8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mpypyvuc5r2i", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nDiscussion", "creation_timestamp": "2026-07-06T18:32:06.361306Z"}, {"uuid": "3a335685-6c72-4ce0-befa-46b290898276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpyq4y4jw22x", "content": "Januscape (CVE-2026-53359) is a KVM shadow-MMU use-after-free flaw enabling guest-to-host corruption on Intel and AMD, with potential for host code execution.\n", "creation_timestamp": "2026-07-06T18:34:23.090195Z"}, {"uuid": "e816ebb5-2357-4d4b-843d-334523b95175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mpyrusp63r2w", "content": "A critical vulnerability dubbed \u2018Januscape\u2018 (CVE-2026-53359) allows a guest virtual machine to panic or potentially execute code on the host [\u2026]", "creation_timestamp": "2026-07-06T19:05:36.014975Z"}, {"uuid": "ad58168d-6e41-4116-96a8-9211edff0375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpyrvo7efd2u", "content": "\ud83e\udd16 CVE-2026-53359 (Januscape): 16-year-old KVM use-after-free allows guest VM escape to host on Intel &amp; AMD x86. Public PoC crashes the host kernel.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-06T19:06:04.744045Z"}, {"uuid": "60dc6d24-869a-4674-b310-092a95b1edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpysiv6jxm24", "content": "Januscape (CVE-2026-53359): 16-Year-Old Linux KVM Flaw Allows Guest-to-Host VM Escape\n\nhttps://blindthoughts.com/januscape-cve-2026-53359-kvm-guest-host-escape\n\n#linuxkernel #kvm #virtualization #cve #hypervisorsecurity", "creation_timestamp": "2026-07-06T19:16:49.716997Z"}, {"uuid": "81597e09-ac83-4281-b6f0-ed179ea34510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mpytar6r3m2y", "content": "Researchers disclosed Januscape (CVE-2026-53359), a 16-year-old flaw in the Linux KVM hypervisor that could allow attackers to escape from a guest virtual machine to the host on both Intel and AMD x86 systems. \n\nvia The Hacker News", "creation_timestamp": "2026-07-06T19:30:12.949960Z"}, {"uuid": "d70a60fe-1449-41fa-b4bd-842de705390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mpytigbcor2o", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T19:34:28.300792Z"}, {"uuid": "bc180b18-2257-419a-9b4c-a48091866793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpyv6g2ydf2w", "content": "Januscape: a 16-year-old Linux KVM flaw (CVE-2026-53359) lets a guest VM take down the host on Intel and AMD. Multi-tenant &amp; ICS virtualization at risk.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/januscape-kvm-guest-to-host-escape-cve-2026-53359-2026", "creation_timestamp": "2026-07-06T20:04:39.616232Z"}, {"uuid": "24ae5c9e-04f8-47df-8f1a-5a1c3e2448f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3mpyy6sixif2l", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T20:58:34.062286Z"}, {"uuid": "c551e1a2-6d80-4d94-b995-27b59959731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mpyybkufeh26", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] | Discussion", "creation_timestamp": "2026-07-06T21:00:06.831752Z"}, {"uuid": "1d41deea-5fba-4128-a97f-89bd12a43ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpyysmvsec2q", "content": "Januscape (CVE-2026-53359): A Silent 16-Year Linux KVM Flaw That Can Collapse Cloud Hosts From Inside a Guest Machine +\u00a0Video\n\nIntroduction: A Hidden Crack Inside the Virtualization Core of Linux A newly disclosed vulnerability in the Linux Kernel-based Virtual Machine (KVM) subsystem has shaken\u2026", "creation_timestamp": "2026-07-06T21:09:39.456010Z"}, {"uuid": "c7212098-9719-4438-b213-1b357f3635ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpz4idj4gf2i", "content": "Linux KVM flaw CVE-2026-53359, Januscape, lets a guest VM trigger host panic and possible code execution on x86 Intel and AMD systems via a shadow MMU use-after-free bug. #Januscape #CVE202653359 #LinuxKernel", "creation_timestamp": "2026-07-06T22:15:29.198199Z"}, {"uuid": "0ed3993a-fb82-49d2-a602-ea5dad7e4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpz36g6upo2j", "content": "We have two patched kernels ready for testing: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nBoth are serious Linux kernel vulnerabilities. \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&amp;utm_source=bluesky", "creation_timestamp": "2026-07-06T21:52:02.280356Z"}, {"uuid": "6442cca6-209a-4444-b54a-626983d1847f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3mpz3apis6k2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]", "creation_timestamp": "2026-07-06T21:53:19.379317Z"}, {"uuid": "8b91e684-ae40-4e48-9be9-1b26d0d0cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as&nbsp;CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-06T22:00:59.348494Z"}, {"uuid": "0c70e8a8-89ee-4e27-bc43-3539f535a3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpz3r7nofn2l", "content": "\ud83d\udd12 Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)\n\nJanuscape (CVE-2026-53359) is a critical KVM escape vulnerability that allows a guest virtual machine to break out and...\n\nhttps://tinyurl.com/24ff7g8a #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-06T22:02:32.492409Z"}, {"uuid": "f39263ef-4f49-4f4d-87c9-4e191b76373a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mpzbyjgsks2h", "content": "Linux Kernel\u306e\u8106\u5f31\u6027(Januscape: CVE-2026-53359)\n\n#security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #linux #kernel #kvm \n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-06T23:54:02.501723Z"}, {"uuid": "206dd3ad-a5a8-4245-8782-cb85556b8a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mpzfhctp77m2", "content": "MT @v4bel@x.com\n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)\n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.\n\n\"16 years\" latent. Successfully used as a 0-day [\u2026]", "creation_timestamp": "2026-07-07T00:56:08.429463Z"}, {"uuid": "e40fe421-e0bb-4585-a670-f755b483b5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as&nbsp;CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-07T01:00:43.309126Z"}, {"uuid": "307733ab-a8a5-4fb2-a6f2-d5a6f1002b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpzg5g3tgy2a", "content": "We have patched kernels ready for testing for two Linux kernel vulnerabilities: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&amp;utm_source=bluesky", "creation_timestamp": "2026-07-07T01:08:19.655185Z"}, {"uuid": "dad99e44-ced6-413a-94a5-0eb4e192a5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mpzhml7m6k2r", "content": "MT @v4bel@x.com \n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.  \n\nDetails: januscape.io\n\n#infosec #januscape #kvm", "creation_timestamp": "2026-07-07T01:34:44.076853Z"}, {"uuid": "5a6fe347-9194-4b85-b065-e9f6e9c828ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mpzhvrhlpp24", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] (github.com)\n\nDiscussion | Main Link", "creation_timestamp": "2026-07-07T01:39:50.578595Z"}, {"uuid": "3a34ea56-d8bd-44d2-ade6-633d01d6bd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpzo27sqra2b", "content": "\ud83e\udd16 CVE-2026-53359 ('Januscape'): 16-year-old KVM use-after-free allows guest VM escape to host on Intel/AMD x86. PoC published. Full exploit path suspected.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-07T03:29:42.323328Z"}, {"uuid": "4867ee03-cb0a-40b6-bf0c-a5fde3707293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mpznifdjii2k", "content": "Januscape (CVE-2026-53359): The 16-Year-Old KVM Bug That Lets a Guest VM Take Down Its\u00a0Host\n\nCVE-2026-53359, dubbed Januscape, is a 16-year-old KVM use-after-free letting guest VMs crash or escalate into the host.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-53359-januscape-kvm-guest-to-host-escape/", "creation_timestamp": "2026-07-07T03:19:44.852116Z"}, {"uuid": "7662a00a-c61d-4e17-8ab8-8ed914039195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mpzvg6wlf727", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\n\n github.com -&gt; \n\nCVE-2026-53359\n\n\nOriginal-&gt;", "creation_timestamp": "2026-07-07T05:41:40.210484Z"}, {"uuid": "dacdf016-87fc-4246-9f5d-8dbb58a2a4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mq24d5odp22f", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\nhttps://github.com/V4bel/Januscape\n\nhttps://news.ycombinator.com/item?id=48807908", "creation_timestamp": "2026-07-07T07:45:16.450987Z"}, {"uuid": "f8e51e5d-b554-4d97-b13b-a509ffa799fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mq27y7nazd2l", "content": "The Januscape vulnerability (CVE-2026-53359) is a critical use-after-free flaw in KVM/x86 that enables guest-to-host escapes on Intel and AMD hardware. It threatens multi-tenant clouds by allowing host kernel compromise or DoS, requiring immediate kernel patching.", "creation_timestamp": "2026-07-07T08:50:42.470764Z"}, {"uuid": "f1de6583-6710-4c06-a8b1-2e2636e20f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mq2epr65oz2w", "content": "\ud83d\udea8 KVM Januscape vulnerability (CVE-2026-53359) discovered: virtual machines can escape host systems! This critical flaw affects Intel &amp; AMD, existing for 16 years. Already exploited as a 0-day, PoC code out, leading to host kernel panics &amp; privilege escalation. Update your systems ASAP!", "creation_timestamp": "2026-07-07T10:15:27.616625Z"}, {"uuid": "d88d5b36-a54a-45c3-9831-764fe39ab345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq2fneiqzy2m", "content": "CVE-2026-53359 (Januscape) is a KVM shadow MMU use-after-free that enables guest-to-host VM escape and host compromise on Intel and AMD.\n", "creation_timestamp": "2026-07-07T10:32:00.998816Z"}, {"uuid": "8c346c04-2868-4484-906a-52e735a8ef7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/adriend.linuxtricks.fr/post/3mq2iqvo5dk2e", "content": "Pour info, la faille #Januscape (CVE-2026-53359) est une faille de type guest-to-host sur KVM ! \nElle permet d'agir (ici un DoS) sur l'h\u00f4te hyperviseur depuis une machine invit\u00e9 !\nEvidemment OLVM, Proxmox, OVirt, etc reposant sur KVM sont vuln\u00e9rables !\n\ncybersecuritynews.com/16-year-old-...", "creation_timestamp": "2026-07-07T11:27:43.099376Z"}, {"uuid": "4ba3823a-5cbf-4d4c-835e-cd1ead5f9fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116878464186548289", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.https://www.securityweek.com/linux-kernel-vulnerability-allows-vm-escape-on-intel-and-amd-systems/", "creation_timestamp": "2026-07-07T11:30:31.388813Z"}, {"uuid": "b7ce395c-7fc9-4440-ba8c-dd76f1528d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mq2iwllx6s2m", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems.\n\nwww.securityweek.com/linux-kernel...", "creation_timestamp": "2026-07-07T11:30:52.939602Z"}]}