New Januscape Linux flaw allows VM escape on Intel, AMD devices

A newly disclosed vulnerability in the Linux kernel, named Januscape, allows an attacker to escape a virtual machine and execute code on the host system. The flaw, present for approximately 16 years before being patched in June 2026, stems from a use-after-free weakness within the shadow MMU emulation of KVM/x86, the virtualization technology for Intel and AMD processors.

Discovered by security researcher Hyunwoo Kim, the vulnerability, tracked as CVE-2026-53359, was reportedly used as a zero-day exploit in Google's kvmCTF vulnerability reward program. Successful exploitation requires root access within the guest virtual machine, a common configuration for public cloud instances.

An attacker who gains root privileges inside a compromised virtual machine could potentially execute arbitrary code on the host system with root privileges. This could lead to the takeover of the host and all other virtual machines running on it. Alternatively, an attacker could trigger a host kernel panic, causing a denial-of-service condition that would take down all other tenant virtual machines on the same physical server.

Kim highlighted that Januscape is significant as it is the first guest-to-host escape vulnerability that can be triggered on both Intel and AMD processor architectures, making it a broad threat to multi-tenant cloud environments. This includes major public cloud providers such as Google Cloud and Amazon Web Services.

In certain Linux distributions, like Red Hat Enterprise Linux, where the `/dev/kvm` device is world-writable, unprivileged attackers may also be able to exploit CVE-2026-53359 to gain root permissions on unpatched systems.

The security researcher has published a technical explanation and a proof-of-concept exploit that can induce a host kernel panic. A full guest-to-host escape exploit is not expected to be released in the near future.

Administrators operating KVM/x86 hosts that support multiple tenants should verify that patch commit 81ccda30b4e8 has been applied to their host kernel to mitigate this vulnerability.

In a separate disclosure in May 2026, Kim also revealed Dirty Frag, a Linux local privilege escalation flaw. Dirty Frag combines vulnerabilities in xfrm-ESP (CVE-2026-43284) and RxRPC (CVE-2026-43500) to achieve root access on major Linux distributions. Kim noted that attackers without initial root access on a target system could potentially chain Dirty Frag and Januscape to achieve a full system compromise.