{"vulnerability": "cve-2026-5335", "sightings": [{"uuid": "8ee1d3fd-dc90-4543-8326-5fa2787ec757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzhinw5uy2v", "content": "CVE-2026-5335 - Magic Export & Import\nCVE ID : CVE-2026-5335\n \n Published : May 4, 2026, 7:16 a.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : The Magic Export & Import WordPress plugin before 1.2.0 stores exported CSV files at a publicly accessible location, making it possi...", "creation_timestamp": "2026-05-04T10:26:32.884394Z"}, {"uuid": "8fc63e4d-2f19-47a0-bbac-d0c8fcc1e31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53353", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlly3lrl2y", "content": "\u0423\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53353 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439?\n\n\n\nhttps://kripta.biz/posts/E87FF37E-A6C9-4E3B-A722-3BE0E4FBE2E3", "creation_timestamp": "2026-07-01T22:41:20.616133Z"}, {"uuid": "30bad885-b13a-4ac8-baa1-9a6f30f3b633", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlmtk27t2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53354 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/3E61CCBE-3DE1-4E19-888D-E2E62B3B1F5A", "creation_timestamp": "2026-07-01T22:41:48.843016Z"}, {"uuid": "cbb7888b-44c3-45a1-b1ef-a018583b5d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53356", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlnl6wwd2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53356 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F7FE501C-616C-423C-BA2A-7F524FB46FD5", "creation_timestamp": "2026-07-01T22:42:14.557211Z"}, {"uuid": "42c5ba3f-cd2e-4996-b369-20063c3cf82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53350", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvbdcrx2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53350 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/6547817B-9D3E-45BD-B756-BCCF78F12D38", "creation_timestamp": "2026-07-01T22:46:32.240592Z"}, {"uuid": "b44e5fcb-7f96-45d7-b6d0-d3d202a0fc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53351", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlvv3owd2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53351 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0435\u0451 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/B62D8076-A951-4F59-95CB-53B241E76B43", "creation_timestamp": "2026-07-01T22:46:52.622616Z"}, {"uuid": "02617bc5-fab0-4ddf-b0ce-1fc5f908d928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53352", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxnkdke2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53352 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/DF8AFD93-507F-464A-BF76-9C5B3325306E", "creation_timestamp": "2026-07-01T22:47:51.693708Z"}, {"uuid": "15913b31-4359-49df-8309-97f52c5075a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53355", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmlxzz3ey2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53355 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0438 \u043a\u0430\u043a \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\n\n\n\nhttps://kripta.biz/posts/3D8A259B-3E51-4646-8FA3-F8C356F5747C", "creation_timestamp": "2026-07-01T22:48:04.734616Z"}, {"uuid": "623aaeff-e32a-4ede-bc8d-46984d80b61f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116854189956800499", "content": "The severity is increased for this new vulnerability affecting Linux Kernel (CVE-2026-53357) https://vuldb.com/vuln/375929", "creation_timestamp": "2026-07-03T04:37:16.183752Z"}, {"uuid": "71ad687f-d31a-4efd-bed2-1d3d2a239f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyqck3e627", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53357 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Bluetooth \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/C2691122-50BE-4DF2-B1A1-832B87B1C2D7", "creation_timestamp": "2026-07-03T07:14:24.201111Z"}, {"uuid": "6537d2d6-662d-4f9e-978a-fb82eaecfaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53358", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppyrs72po2n", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53358 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f Bluetooth \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/94BD36E8-A1BB-4B72-8025-379F43E5D9A0", "creation_timestamp": "2026-07-03T07:15:13.406837Z"}, {"uuid": "38f543e8-bc76-4946-a2d4-850c3856058e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5hlemyh2o", "content": "CVE-2026-53357: Bluetooth's UAF Flaw Could Enable Serious Exploits #CVE2026 #BluetoothSecurity #UAFVulnerability", "creation_timestamp": "2026-07-04T03:44:19.576225Z"}, {"uuid": "4f8bdc47-bc1d-41af-a626-5f53f5a69780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jd3vqp24", "content": "CVE-2026-53357 Exposes Bluetooth Protocol: Exploit Potential Uncertain #CVE2026 #BluetoothSecurity #Vulnerability", "creation_timestamp": "2026-07-04T03:45:17.472958Z"}, {"uuid": "e89cde24-6bc6-4836-b718-76b34dad39b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jf2rll2d", "content": "CVE-2026-53357 Bluetooth Vulnerability Exposes Questions on Device Security #BluetoothVulnerability #DeviceSecurity #CyberSecurity", "creation_timestamp": "2026-07-04T03:45:20.211901Z"}, {"uuid": "a7528a17-5cbc-4519-9b49-3c9c26a512ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jgwyoe2f", "content": "CVE-2026-53357: Bluetooth Vulnerability Lacks Robust Mitigation Guidance #CVE2026 #BluetoothVulnerability #CyberSecurity", "creation_timestamp": "2026-07-04T03:45:21.608681Z"}, {"uuid": "33724784-b4b4-4c6b-9b3f-5951780b8cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jiucux2m", "content": "CVE-2026-53357: Bluetooth Vulnerability Exposes Gaping Holes in Protocol Stability #Bluetooth #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-04T03:45:24.219998Z"}, {"uuid": "96eaa50a-3ccb-4a7b-a09f-28799e688257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mps5jkt32727", "content": "CVE-2026-53357 Bluetooth: Is the UAF Vulnerability a Major Threat or Manageable Risk? #CVE2026 #BluetoothSecurity #UAFVulnerability", "creation_timestamp": "2026-07-04T03:45:25.703953Z"}, {"uuid": "6beeb024-2bf0-44b6-99f8-cc50bfae577d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpttwie53x23", "content": "CVE-2026-53359 - KVM: x86: Fix shadow paging use-after-free due to unexpected role\nCVE ID : CVE-2026-53359\n \n Published : July 4, 2026, 12:17 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shad...", "creation_timestamp": "2026-07-04T19:59:00.967681Z"}, {"uuid": "0e68c368-0ccc-4561-8566-ba9dd0db3554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpunaasf442y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/F9CDFDE2-37AC-4BC1-839E-6020F968C338", "creation_timestamp": "2026-07-05T03:31:57.012156Z"}, {"uuid": "dd794a68-2a04-4caf-bed5-8060931740c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116865551315118647", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53359) https://vuldb.com/vuln/376323", "creation_timestamp": "2026-07-05T04:46:36.638474Z"}, {"uuid": "5e930966-8f18-4944-a368-dd30a87125bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/askfred.be/post/3mpuz3gyt2z23", "content": "I had to sit with the latest Linux stable kernel releases for a minute. Greg Kroah-Hartman pushed out seven updates, and tucked inside is a fix for a KVM use-after-free vulnerability (CVE-2026-53359) that was actually introduced all the way back in kernel version 2.6.36.", "creation_timestamp": "2026-07-05T07:03:55.698929Z"}, {"uuid": "5d8147d5-dedb-4636-ada4-935b17f1763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:31.960797Z"}, {"uuid": "b467cc42-8b5b-4dc5-bac7-ec91fa43cd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53350", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:16.553438Z"}, {"uuid": "e9e10c51-650e-4d18-967d-4dbaeb5f3705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53352", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:18.884013Z"}, {"uuid": "c9f1d7fe-0bd0-4afc-8e53-bfc466ff47ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:22.505401Z"}, {"uuid": "ba7fcfed-8452-4144-94bd-3a85b2dce4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53355", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:24.851330Z"}, {"uuid": "54205c88-c831-400b-ba62-bde89d0328ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53356", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:27.124304Z"}, {"uuid": "9a005327-24c1-489d-87ac-cf28eea80b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53357", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:29.394204Z"}, {"uuid": "52accd86-6905-42c0-9d2d-50990cf612e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116874019977365878", "content": "Oh, goodie. KVM Guest-to-Host escape\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:18.875429Z"}, {"uuid": "09c98d49-f641-401e-a4ad-e71ba71980d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mpyjr3o4weo2", "content": "Oh, goodie. KVM Guest-to-Host escape\n\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\n\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:38.808871Z"}, {"uuid": "4e6681fb-052a-46f5-97f2-9d25f5b3e4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpykhay4su2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)", "creation_timestamp": "2026-07-06T16:52:45.031950Z"}, {"uuid": "de18a5ba-b247-4d0d-90a2-6e050acf5be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpyl7a53oo26", "content": "Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.\n\n#Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day", "creation_timestamp": "2026-07-06T17:06:09.848148Z"}, {"uuid": "6d4b7857-11cd-4017-b8a8-dc1522530eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874224446929748", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: A Long-Lived KVM Bug Resurfaces: Shadow Paging Use-After-Free in the Linux Kernel (CVE-2026-53359)\nLink: https://darkwebinformer.com/a-long-lived-kvm-bug-resurfaces-shadow-paging-use-after-free-in-the-linux-kernel-cve-2026-53359/", "creation_timestamp": "2026-07-06T17:32:18.225958Z"}, {"uuid": "c56690b2-9f13-46bb-a324-740224bdb464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mpyp5ldmoa2q", "content": "A guest-to-host VM escape exploit against KVM on x86 (CVE-2026-53359), released open source with a writeup.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fgithub.com%2FV4bel%2FJanuscape&t=Januscape%3A%20Guest-to-Host%20Escape%20in%20KVM%2Fx86%20%5BCVE-2026-53359%5D", "creation_timestamp": "2026-07-06T18:16:49.470749Z"}, {"uuid": "542a9219-7fe5-4192-9df3-f422f0047346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mpypvjfaoc2v", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\ncomments \u00b7 posted on 2026.07.06 at 13:35:03 (c=1, p=5)", "creation_timestamp": "2026-07-06T18:30:12.440323Z"}, {"uuid": "b25f3bd0-cb8b-4f92-a7be-431bfcee9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mpypwr5whs2z", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nhttps://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-06T18:30:53.961579Z"}, {"uuid": "84225216-99ed-4661-8748-1942f0eff8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mpypyvuc5r2i", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nDiscussion", "creation_timestamp": "2026-07-06T18:32:06.361306Z"}, {"uuid": "3a335685-6c72-4ce0-befa-46b290898276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpyq4y4jw22x", "content": "Januscape (CVE-2026-53359) is a KVM shadow-MMU use-after-free flaw enabling guest-to-host corruption on Intel and AMD, with potential for host code execution.\n", "creation_timestamp": "2026-07-06T18:34:23.090195Z"}, {"uuid": "e816ebb5-2357-4d4b-843d-334523b95175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mpyrusp63r2w", "content": "A critical vulnerability dubbed \u2018Januscape\u2018 (CVE-2026-53359) allows a guest virtual machine to panic or potentially execute code on the host [\u2026]", "creation_timestamp": "2026-07-06T19:05:36.014975Z"}, {"uuid": "ad58168d-6e41-4116-96a8-9211edff0375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpyrvo7efd2u", "content": "\ud83e\udd16 CVE-2026-53359 (Januscape): 16-year-old KVM use-after-free allows guest VM escape to host on Intel & AMD x86. Public PoC crashes the host kernel.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-06T19:06:04.744045Z"}, {"uuid": "60dc6d24-869a-4674-b310-092a95b1edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpysiv6jxm24", "content": "Januscape (CVE-2026-53359): 16-Year-Old Linux KVM Flaw Allows Guest-to-Host VM Escape\n\nhttps://blindthoughts.com/januscape-cve-2026-53359-kvm-guest-host-escape\n\n#linuxkernel #kvm #virtualization #cve #hypervisorsecurity", "creation_timestamp": "2026-07-06T19:16:49.716997Z"}, {"uuid": "81597e09-ac83-4281-b6f0-ed179ea34510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mpytar6r3m2y", "content": "Researchers disclosed Januscape (CVE-2026-53359), a 16-year-old flaw in the Linux KVM hypervisor that could allow attackers to escape from a guest virtual machine to the host on both Intel and AMD x86 systems. \n\nvia The Hacker News", "creation_timestamp": "2026-07-06T19:30:12.949960Z"}, {"uuid": "d70a60fe-1449-41fa-b4bd-842de705390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mpytigbcor2o", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T19:34:28.300792Z"}, {"uuid": "bc180b18-2257-419a-9b4c-a48091866793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpyv6g2ydf2w", "content": "Januscape: a 16-year-old Linux KVM flaw (CVE-2026-53359) lets a guest VM take down the host on Intel and AMD. Multi-tenant & ICS virtualization at risk.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/januscape-kvm-guest-to-host-escape-cve-2026-53359-2026", "creation_timestamp": "2026-07-06T20:04:39.616232Z"}, {"uuid": "24ae5c9e-04f8-47df-8f1a-5a1c3e2448f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3mpyy6sixif2l", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T20:58:34.062286Z"}, {"uuid": "c551e1a2-6d80-4d94-b995-27b59959731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mpyybkufeh26", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] | Discussion", "creation_timestamp": "2026-07-06T21:00:06.831752Z"}, {"uuid": "1d41deea-5fba-4128-a97f-89bd12a43ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpyysmvsec2q", "content": "Januscape (CVE-2026-53359): A Silent 16-Year Linux KVM Flaw That Can Collapse Cloud Hosts From Inside a Guest Machine +\u00a0Video\n\nIntroduction: A Hidden Crack Inside the Virtualization Core of Linux A newly disclosed vulnerability in the Linux Kernel-based Virtual Machine (KVM) subsystem has shaken\u2026", "creation_timestamp": "2026-07-06T21:09:39.456010Z"}, {"uuid": "c7212098-9719-4438-b213-1b357f3635ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpz4idj4gf2i", "content": "Linux KVM flaw CVE-2026-53359, Januscape, lets a guest VM trigger host panic and possible code execution on x86 Intel and AMD systems via a shadow MMU use-after-free bug. #Januscape #CVE202653359 #LinuxKernel", "creation_timestamp": "2026-07-06T22:15:29.198199Z"}, {"uuid": "0ed3993a-fb82-49d2-a602-ea5dad7e4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpz36g6upo2j", "content": "We have two patched kernels ready for testing: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nBoth are serious Linux kernel vulnerabilities. \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-06T21:52:02.280356Z"}, {"uuid": "6442cca6-209a-4444-b54a-626983d1847f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3mpz3apis6k2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]", "creation_timestamp": "2026-07-06T21:53:19.379317Z"}, {"uuid": "8b91e684-ae40-4e48-9be9-1b26d0d0cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-06T22:00:59.348494Z"}, {"uuid": "0c70e8a8-89ee-4e27-bc43-3539f535a3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpz3r7nofn2l", "content": "\ud83d\udd12 Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)\n\nJanuscape (CVE-2026-53359) is a critical KVM escape vulnerability that allows a guest virtual machine to break out and...\n\nhttps://tinyurl.com/24ff7g8a #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-06T22:02:32.492409Z"}, {"uuid": "f39263ef-4f49-4f4d-87c9-4e191b76373a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mpzbyjgsks2h", "content": "Linux Kernel\u306e\u8106\u5f31\u6027(Januscape: CVE-2026-53359)\n\n#security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #linux #kernel #kvm \n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-06T23:54:02.501723Z"}, {"uuid": "206dd3ad-a5a8-4245-8782-cb85556b8a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mpzfhctp77m2", "content": "MT @v4bel@x.com\n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)\n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.\n\n\"16 years\" latent. Successfully used as a 0-day [\u2026]", "creation_timestamp": "2026-07-07T00:56:08.429463Z"}, {"uuid": "e40fe421-e0bb-4585-a670-f755b483b5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-07T01:00:43.309126Z"}, {"uuid": "307733ab-a8a5-4fb2-a6f2-d5a6f1002b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpzg5g3tgy2a", "content": "We have patched kernels ready for testing for two Linux kernel vulnerabilities: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-07T01:08:19.655185Z"}, {"uuid": "dad99e44-ced6-413a-94a5-0eb4e192a5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mpzhml7m6k2r", "content": "MT @v4bel@x.com \n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.  \n\nDetails: januscape.io\n\n#infosec #januscape #kvm", "creation_timestamp": "2026-07-07T01:34:44.076853Z"}, {"uuid": "5a6fe347-9194-4b85-b065-e9f6e9c828ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mpzhvrhlpp24", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] (github.com)\n\nDiscussion | Main Link", "creation_timestamp": "2026-07-07T01:39:50.578595Z"}, {"uuid": "3a34ea56-d8bd-44d2-ade6-633d01d6bd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpzo27sqra2b", "content": "\ud83e\udd16 CVE-2026-53359 ('Januscape'): 16-year-old KVM use-after-free allows guest VM escape to host on Intel/AMD x86. PoC published. Full exploit path suspected.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-07T03:29:42.323328Z"}, {"uuid": "4867ee03-cb0a-40b6-bf0c-a5fde3707293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mpznifdjii2k", "content": "Januscape (CVE-2026-53359): The 16-Year-Old KVM Bug That Lets a Guest VM Take Down Its\u00a0Host\n\nCVE-2026-53359, dubbed Januscape, is a 16-year-old KVM use-after-free letting guest VMs crash or escalate into the host.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-53359-januscape-kvm-guest-to-host-escape/", "creation_timestamp": "2026-07-07T03:19:44.852116Z"}, {"uuid": "7662a00a-c61d-4e17-8ab8-8ed914039195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mpzvg6wlf727", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\n\n github.com -> \n\nCVE-2026-53359\n\n\nOriginal->", "creation_timestamp": "2026-07-07T05:41:40.210484Z"}, {"uuid": "dacdf016-87fc-4246-9f5d-8dbb58a2a4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mq24d5odp22f", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\nhttps://github.com/V4bel/Januscape\n\nhttps://news.ycombinator.com/item?id=48807908", "creation_timestamp": "2026-07-07T07:45:16.450987Z"}, {"uuid": "f8e51e5d-b554-4d97-b13b-a509ffa799fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mq27y7nazd2l", "content": "The Januscape vulnerability (CVE-2026-53359) is a critical use-after-free flaw in KVM/x86 that enables guest-to-host escapes on Intel and AMD hardware. It threatens multi-tenant clouds by allowing host kernel compromise or DoS, requiring immediate kernel patching.", "creation_timestamp": "2026-07-07T08:50:42.470764Z"}, {"uuid": "f1de6583-6710-4c06-a8b1-2e2636e20f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mq2epr65oz2w", "content": "\ud83d\udea8 KVM Januscape vulnerability (CVE-2026-53359) discovered: virtual machines can escape host systems! This critical flaw affects Intel & AMD, existing for 16 years. Already exploited as a 0-day, PoC code out, leading to host kernel panics & privilege escalation. Update your systems ASAP!", "creation_timestamp": "2026-07-07T10:15:27.616625Z"}, {"uuid": "d88d5b36-a54a-45c3-9831-764fe39ab345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq2fneiqzy2m", "content": "CVE-2026-53359 (Januscape) is a KVM shadow MMU use-after-free that enables guest-to-host VM escape and host compromise on Intel and AMD.\n", "creation_timestamp": "2026-07-07T10:32:00.998816Z"}, {"uuid": "8c346c04-2868-4484-906a-52e735a8ef7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/adriend.linuxtricks.fr/post/3mq2iqvo5dk2e", "content": "Pour info, la faille #Januscape (CVE-2026-53359) est une faille de type guest-to-host sur KVM ! \nElle permet d'agir (ici un DoS) sur l'h\u00f4te hyperviseur depuis une machine invit\u00e9 !\nEvidemment OLVM, Proxmox, OVirt, etc reposant sur KVM sont vuln\u00e9rables !\n\ncybersecuritynews.com/16-year-old-...", "creation_timestamp": "2026-07-07T11:27:43.099376Z"}, {"uuid": "4ba3823a-5cbf-4d4c-835e-cd1ead5f9fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116878464186548289", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.https://www.securityweek.com/linux-kernel-vulnerability-allows-vm-escape-on-intel-and-amd-systems/", "creation_timestamp": "2026-07-07T11:30:31.388813Z"}, {"uuid": "b7ce395c-7fc9-4440-ba8c-dd76f1528d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mq2iwllx6s2m", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems.\n\nwww.securityweek.com/linux-kernel...", "creation_timestamp": "2026-07-07T11:30:52.939602Z"}, {"uuid": "eaeb0d8e-e2ae-46ba-b7a2-2361e25fa45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2mbincpo2i", "content": "\ud83d\udcf0 Kerentanan Januscape di Linux Memungkinkan Escape dari Virtual Machine pada Prosesor Intel dan AMD\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/januscape-linux-kvm-vm-escape-vulnerability/\n\n#amd #cve-2026-53359 #intel #januscape #kernelLinux #kvm #linux #virtualMachine #", "creation_timestamp": "2026-07-07T12:30:38.628674Z"}, {"uuid": "2c227699-7559-4d76-9873-f399e59f3c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq2n3sw3ze2b", "content": "Linux kernel flaw CVE-2026-53359, nicknamed Januscape, can let attackers escape KVM VMs and execute code on the host. The shadow MMU bug threatens public clouds and nested virtualization. #Januscape #KVM #IntelAMD", "creation_timestamp": "2026-07-07T12:45:21.825677Z"}, {"uuid": "e102c845-4e6e-41e8-8b1a-716989091445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116878901154624597", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:21:38.881829Z"}, {"uuid": "3d6298ef-dd87-49d1-858b-24c4a6630294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mq2p4un7rre2", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:22:03.824744Z"}, {"uuid": "cf9e6e5c-841d-420c-b39a-74c3f6d8b10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmdnna22p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.059179Z"}, {"uuid": "7736915c-4b99-480c-a2d3-f11991580203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmesfyc2p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.506776Z"}, {"uuid": "bd3ff590-7206-4822-b3ab-75c0fbc75036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/exe.dev/post/3mq2s2kogpk2o", "content": "While we validate a kernel change for januscape (CVE-2026-53359), we have disable nested KVM across our fleet for individuals and teams without dedicated hardware. We will restore nested KVM in a rolling release as soon as we can. Apologies for the inconvenience.", "creation_timestamp": "2026-07-07T14:14:08.453547Z"}, {"uuid": "d12ae95b-73c5-4a50-bcdd-51f180b240b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mq2umu4bpq2p", "content": "Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD.", "creation_timestamp": "2026-07-07T15:00:09.672679Z"}, {"uuid": "5dfe2665-724a-4563-80a8-c4ceb9a222d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mq2vhnt5hc24", "content": "Can a 16-year-old bug really blow up cloud security? Yes. Januscape (CVE-2026-53359) is a Linux KVM flaw allowing VM escape on Intel/AMD. If you run VMs, this zero-day means your host could be compromised. Find out how to protect\u2026\n\nhttps://www.tpp.blog/21opoya\n\n#opensource #januscape #cve202653359", "creation_timestamp": "2026-07-07T15:15:09.234790Z"}, {"uuid": "14e74375-89a6-4944-a917-a4bec526805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wn77tqs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:10.687315Z"}, {"uuid": "80d4205a-f05b-4d99-bed8-3dda5262b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wna6pzs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:11.163997Z"}, {"uuid": "fe8be2b1-684f-4261-9f75-d48d11934848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-07T16:00:45.483193Z"}, {"uuid": "e089ac08-950c-4f89-9422-07ab6d64e883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mq33eolbgi2v", "content": "Januscape (CVE-2026-53359) : une faille use-after-free rest\u00e9e 16 ans dans KVM.\n\nLouez un VPS, activez la virtu imbriqu\u00e9e c\u00f4t\u00e9 h\u00f4te, et une seule VM peut faire tomber l'h\u00f4te + toutes les VM voisines.\n\n\u00c0 patcher \ud83d\udc47\nwww.it-connect.fr/januscape-fa...\n\n#linux", "creation_timestamp": "2026-07-07T17:00:52.410471Z"}, {"uuid": "06848184-41f2-49af-a2d7-0fb5a5d8b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mq34hkw7uz2c", "content": "A 16-year-old flaw in #Linux KVM hypervisor dubbed \"#Januscape\" (CVE-2026-53359) is a Use-After-Free vulnerability which allows guest VMs to escape to the host:\n\nThe fix was merged into the mainline Linux kernel on June 19, 2026:\n\ud83d\udc47", "creation_timestamp": "2026-07-07T17:20:22.686440Z"}, {"uuid": "59fca4b4-500b-4351-a39d-d80a0bab022a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mq3fs4tl3b2f", "content": "A use-after-free vulnerability in Linux's KVM hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows guest VMs to escape to the host on Intel and AMD systems. Discovered by Hyunwoo Kim, the flaw has existed for 16 years and can lead to host code execution.", "creation_timestamp": "2026-07-07T20:07:20.535529Z"}, {"uuid": "ec451422-4923-4b99-91fe-e9fdaf2c8cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-08T01:00:54.120639Z"}, {"uuid": "afc31830-06c4-4f37-84c8-82129b0ac654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq3zp2b35w2o", "content": "\ud83d\udcf0 If you self-host KVM/Proxmox with nested virtualization enabled, check for CVE-2026-53359 patches\n\nA Linux kernel vulnerability, CVE-2026-53359 (\"Januscape\"), affects KVM's shadow paging code w...\n\nhttps://tinyurl.com/2ybvt5yt #TechNews #CrustyTLDR", "creation_timestamp": "2026-07-08T02:03:31.669360Z"}, {"uuid": "ae24d342-82bd-4c99-817d-c5dfbf339ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq5hk3hyhg2c", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-08T15:43:57.810923Z"}, {"uuid": "e738157d-1bdf-49fa-9782-4bb092397066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq56gexppq2d", "content": "Januscape CVE-2026-53359 KVM Vulnerability", "creation_timestamp": "2026-07-08T13:00:49.761364Z"}, {"uuid": "c414a300-0af1-4c39-be22-0d8b8128b52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq56qxxsyg2r", "content": "Januscape CVE-2026-53359 KVM\u306e\u8106\u5f31\u6027\n\n\u4eee\u60f3\u30de\u30b7\u30f3\u306f\u672c\u6765\u3001\u7269\u7406\u30db\u30b9\u30c8\u304b\u3089\u9694\u96e2\u3055\u308c\u305f\u72b6\u614b\u3092\u4fdd\u3064\u3088\u3046\u8a2d\u8a08\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3057\u304b\u3057\u3001Linux\u30ab\u30fc\u30cd\u30eb\u30d9\u30fc\u30b9\u306e\u4eee\u60f3\u30de\u30b7\u30f3(KVM)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u306b\u3088\u308a\u3001\u30b2\u30b9\u30c8OS\u304c\u3053\u306e\u5883\u754c\u3092\u7a81\u7834\u3057\u3001\u30db\u30b9\u30c8\u30ab\u30fc\u30cd\u30eb\u3092\u4fb5\u5bb3\u3067\u304d\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002Januscape\u8106\u5f31\u6027\u3068\u540d\u4ed8\u3051\u3089\u308c\u3001CVE-2026-53359...", "creation_timestamp": "2026-07-08T13:06:45.383461Z"}, {"uuid": "1e0f45d8-42a1-4ece-8e1b-24b08296951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-08T16:01:24.062589Z"}, {"uuid": "0259159e-be10-44fa-b97e-dfb3dcba2e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq64nzj5ou2r", "content": "CVE-2026-53359 (Januscape) in KVM lets untrusted guest VMs on AMD/Intel break out to compromise or crash Linux hosts via guest-side use-after-free memory corruption.\n", "creation_timestamp": "2026-07-08T22:01:59.177100Z"}, {"uuid": "e2977ff3-fd00-4e6f-b5e6-9308220d3584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-09T01:00:49.160584Z"}, {"uuid": "9dc3f41e-16a0-4f4a-9438-c4a12a6d3418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mq7cw73jss2u", "content": "Eine Schwachstelle kann bereits hohe Aufmerksamkeit erhalten, bevor ein CVSS-Score vergeben wurde.\n\nCVE-2026-53359 (Januscape) ist ein aktuelles Beispiel.\n\nDie kostenlose Trending-CVE-\u00dcbersicht von VulnDex zeigt solche Entwicklungen fr\u00fchzeitig.\n\n\ud83d\udc49 vulndex.at/intel/trendi...", "creation_timestamp": "2026-07-09T09:26:36.561853Z"}, {"uuid": "1572756d-d1cd-4cc0-bff1-8fb5715d7d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://gist.github.com/lexfrei/4e8e13137f97b60874350ef2ac512f6d", "content": "# Correctly fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\n## TL;DR\n\nThe config-based mitigation for CVE-2026-53359 that's often recommended \u2014 `machine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0]` \u2014 **is silently ignored on Talos nodes that boot via systemd-boot / UKI** (bare-metal UEFI is the common case). The kernel command line is baked into the signed UKI and cannot be changed by machine config; `grubUseUKICmdline` only affects GRUB.\n\nThe correct fix is to **upgrade to a Talos build whose kernel already contains the patch** \u2014 Linux **6.18.38**, shipped in **Talos v1.13.6** \u2014 which closes **both** CVEs at the kernel level. Then you don't need to disable nested virtualization at all.\n\n## The two CVEs and their fixed kernels\n\nBoth are KVM x86 shadow-paging use-after-free bugs enabling guest-to-host escape:\n\n| CVE | Fixed in the 6.18.x line |\n| --- | --- |\n| CVE-2026-46113 | 6.18.30 |\n| CVE-2026-53359 (Januscape) | 6.18.38 |\n\nStable kernels are cumulative, so **6.18.38 contains both fixes**. Mapping to Talos:\n\n- Talos **v1.13.5** \u2192 kernel 6.18.36 \u2192 fixes only 46113 (NOT 53359).\n- Talos **v1.13.6** \u2192 kernel 6.18.38 \u2192 fixes **both**.\n\nSo bump to **v1.13.6**, not v1.13.5.\n\n## Why the config mitigation fails on systemd-boot\n\nTalos docs, verbatim: *\"the `.machine.install.extraKernelArgs` field is ignored, as kernel arguments are embedded in the UKI and cannot be modified without upgrading the UKI.\"*\n\n- `kvm_intel`/`kvm_amd` are built into the Talos kernel, so `modprobe.d` does nothing and `/sys/module/kvm_intel/parameters/nested` is `0444` (read-only). `nested=` is settable only via the kernel command line.\n- On systemd-boot the cmdline lives inside the signed UKI, so `extraKernelArgs` are dropped \u2014 Talos even warns `extra kernel arguments are not supported when booting using SDBoot`.\n- `grubUseUKICmdline: false` only helps GRUB nodes. On a systemd-boot node, `talosctl upgrade` with these args leaves `/proc/cmdline` unchanged and nested stays on.\n\nSo on systemd-boot nodes, disabling nested via config is not possible \u2014 but you don't need to. Just run a fixed kernel.\n\n## The fix \u2014 upgrade to Talos v1.13.6\n\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), build a Talos Image Factory schematic and upgrade to it. Nothing here requires a custom-built image \u2014 Image Factory assembles the stock installer plus the official extensions declaratively.\n\n### 1. Create a schematic with your extensions\n\n```sh\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n```\n\nTrim the extension list to what your cluster actually uses.\n\n### 2. Upgrade node-by-node\n\n```sh\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n```\n\n`talosctl upgrade` re-runs the installer, rewrites the boot assets and reboots. Roll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Note: Talos only tests migrations between adjacent minors, so from an old release upgrade sequentially through each minor's latest patch (e.g. 1.10 \u2192 1.11 \u2192 1.12 \u2192 1.13) rather than jumping straight.\n\n### 3. Verify\n\n```sh\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n```\n\n`kvm_intel.nested` may stay `Y` \u2014 that is fine; the vulnerable code path is fixed in the kernel.\n\n## Ready example (Cozystack extension set)\n\nA schematic with the standard Cozystack extension set (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\n- Schematic ID: `be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5`\n- Installer: `factory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6`\n\n## References\n\n- CVE-2026-53359 (Januscape): https://nvd.nist.gov/vuln/detail/CVE-2026-53359\n- CVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n- Talos bootloader (GRUB vs systemd-boot, UKI cmdline): https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n- Talos Image Factory: https://factory.talos.dev\n", "creation_timestamp": "2026-07-09T12:33:33.641301Z"}, {"uuid": "00cd7084-b3bc-48df-902a-19bf6a1ebca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq7xybfkwg2e", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-09T15:43:33.867882Z"}, {"uuid": "12ce5815-a5b9-4920-b548-78da0bc13115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqbpbqr7rw2w", "content": "COGNOSCERE Tech Brief \u2014 2026-07-10\n\nJanuscape, CVE-2026-53359, is a use-after-free bug in Linux KVM's shadow MMU dat\n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-10T08:13:06.924327Z"}, {"uuid": "9802b9e8-0f37-4686-825d-45d25554d56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/xceptn.bsky.social/post/3mqcb5tor3v2p", "content": "A recent KVM vulnerability fix - NVD - CVE-2026-53359 nvd.nist.gov/vuln/detail/... #Linux #FOSS #OpenSource #Technology #Security", "creation_timestamp": "2026-07-10T13:33:03.814105Z"}, {"uuid": "c3d8cdcc-303e-4d75-928d-63646e287994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mqcihaubt422", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-10T15:43:34.756956Z"}, {"uuid": "5b35085f-b68f-4e6d-8341-ecec5ccef8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53354", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqclyfpnse2z", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53354 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0447\u0442\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432?\n\n\n\nhttps://kripta.biz/posts/9B1BF6DA-8B91-4798-BF1F-13CB8CD88CBE", "creation_timestamp": "2026-07-10T16:46:52.145320Z"}, {"uuid": "91a32611-cbbc-45e7-b33e-a6aec65a9d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/116896957268026860", "content": "\ud83c\udd95 Vulnerability-Lookup now imports Microsoft CSAF VEX documents from MSRC \u2014 joining the Red Hat VEX feed as a vendor VEX enrichment source.\nPer-CVE VEX statements (product status, severity) are attached directly to CVE records, visible on the vulnerability page and via the API with the full CSAF documents.\nExample with both Red Hat and Microsoft VEX:https://vulnerability.circl.lu/vuln/CVE-2026-53359#vex\n#VEX #CSAF #VulnerabilityManagement #CVE #OpenSource", "creation_timestamp": "2026-07-10T17:53:34.162676Z"}, {"uuid": "fc5234d7-bf3a-4669-92e1-35f3404e6c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqe7qkiszr2q", "content": "COGNOSCERE Tech Brief \u2014 2026-07-11\n\nCVE-2026-53359, dubbed Januscape, is a use-after-free bug in Linux KVM's shadow \n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-11T08:13:03.528627Z"}, {"uuid": "1e92ec6b-603f-4324-8a80-7557c49d7a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqfutrf5z72l", "content": "Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested\u2026\n\n\ud83d\udd01 RT @v4bel | reposted by @HackingLZ\nhttps://x.com/v4bel/status/2074162435339207141", "creation_timestamp": "2026-07-12T00:03:18.822660Z"}, {"uuid": "b4696590-c066-4e4e-89d2-cbed3f87963f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mqh37nbd5j2w", "content": "A use-after-free bug in Linux KVM (CVE-2026-53359), dubbed Januscape, allows a guest VM to corrupt the host's shadow page state, risking host stability. Public proof-of-concept causes panics.", "creation_timestamp": "2026-07-12T11:29:59.413093Z"}, {"uuid": "8b64ab9c-baa1-4e1f-a86d-a14ceacb2309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-12T13:00:04.217576Z"}, {"uuid": "b85a6d93-1bcd-4756-8dae-4bf858266011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mqhzkzhzb32b", "content": "Introduction A local privilege escalation (LPE) vulnerability affecting the Linux kernel was publicly disclosed on July 6, 2026. The vulnerability was assigned CVE ID CVE-2026-53359 and i...\n\n\ud83d\udd17 https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-12T20:33:13.337012Z"}, {"uuid": "3d0e7842-6df0-42c6-b6eb-82d3c5a2e756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-13T00:00:44.289333Z"}, {"uuid": "4a70e523-41ab-4598-a3c7-720056885de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mqjifxjg2c7u", "content": "Januscape vulnerability CVE-2026-53359 mitigations available | Ubuntu https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-13T10:31:30.228658Z"}, {"uuid": "1ebbd6e0-5807-4242-ba60-f2ae899b26a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqjngi26od2u", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-48282, CVE-2026-50656, CVE-2026-55255, CVE-2026-20896, CVE-2026-53359\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-13T12:01:15.622705Z"}, {"uuid": "c431e30f-c856-465a-9382-30505b9be5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-13T13:00:05.336859Z"}, {"uuid": "2cf418f0-882e-4134-8836-3e4dcbf510e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.268007Z"}, {"uuid": "e212e407-3de1-4080-a644-c44eef83b4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:09.723971Z"}, {"uuid": "7d10f761-b0a5-442e-9a14-e5488b89c36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.171938Z"}, {"uuid": "e007c07a-d230-4706-9ebb-4f5b39d800b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.740346Z"}, {"uuid": "9062b181-7244-4109-bc24-9044b39f41cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.198430Z"}, {"uuid": "a767315b-aeec-4230-8ba1-387e4c917a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.646228Z"}, {"uuid": "9c9eff16-557f-46c9-a18b-be9c51f08c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.724033Z"}, {"uuid": "2bb650ab-5a17-40c7-b81b-c9d09dec93a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.046666Z"}, {"uuid": "cb037f50-3dc7-4333-a9d1-02ed730d1a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.319313Z"}, {"uuid": "a9845fa4-adf3-41e5-921d-074d810dd22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.729219Z"}, {"uuid": "b9eef9ab-ce5d-4b70-9d15-c40f42bc4b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-14T00:00:47.248043Z"}, {"uuid": "982c60ab-1650-4c7d-9698-f97fe9d75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-14T01:00:04.664612Z"}, {"uuid": "199f5271-a6c3-41e8-bf03-608abe08f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.238476Z"}, {"uuid": "81b23dc4-0e05-4271-a2ef-b64297523058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.510051Z"}, {"uuid": "0d8e0edd-638a-4dbe-be93-2938b69c8f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.420800Z"}, {"uuid": "632f4b16-b91f-473f-87a9-7ced14d79faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.675882Z"}, {"uuid": "aa01daad-9d3a-46a8-b16f-70209b4f0d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-15T00:00:35.330580Z"}, {"uuid": "db700f97-1dae-49d9-82d6-844b026a6492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.321877Z"}, {"uuid": "217f4b01-97e8-42ea-9266-42fa1d30c413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.391264Z"}, {"uuid": "268eb721-96fc-4cdb-b518-37e9d81ceac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-15T02:00:04.242266Z"}, {"uuid": "cff7b1ad-a4a5-4514-a7e6-8ce6800b4e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-15T12:00:03.946042Z"}, {"uuid": "63dbf4cc-bc93-4ab3-b1ec-0f7a7f1a064b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-16T00:00:19.694654Z"}, {"uuid": "122d0f3b-f650-467f-9002-8507aad6d9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-16T00:00:20.675744Z"}, {"uuid": "97726b66-ff05-43bc-bb18-f6ce4efea19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/sagalinked.bsky.social/post/3mqqjybbg2g2a", "content": "\ud83d\udcf0 Januscape, an open-source tool for guest-to-host escape attacks in KVM/x86 systems, has been identified as vulnerable to a critical security flaw (CVE-2026-53359), potentially allowing attackers to gain unauthorized access to host machines.\n\n\ud83d\udd17 https://github.com/V4bel/Januscape\n\n#Tech #Dev", "creation_timestamp": "2026-07-16T05:48:16.478294Z"}, {"uuid": "9a958355-7c38-4ff1-9895-fe28cf0906a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93551", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a almalinux-januscape-mitigation\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x024n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:47:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPanduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.448996Z"}, {"uuid": "531523d7-9a3d-4bee-9e42-588dd6dd2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/93525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ndouglas-cloudsmith\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 11:46:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:05.783569Z"}]}