Two significant vulnerabilities in Linux have been disclosed this week, both classified as high-severity flaws that could allow unauthorized access and privilege escalation.
The first vulnerability, identified as CVE-2026-53359 and named Januscape, resides in KVM, a virtualization component integrated into the Linux kernel. The flaw enables untrusted guest virtual machines to break out of their isolated containers and gain root-level access to the host operating system. The vulnerability affects systems running KVM on both AMD and Intel processors and stems from a use-after-free bug in the shadow MMU emulation process, which handles memory address translation between the host and hypervisor. Security researcher Hyunwoo Kim, who discovered the flaw, noted that an attacker with access to a single cloud instance could potentially disable other tenants’ virtual machines on the same physical hardware or execute code with root privileges to compromise the entire host system. The vulnerability remained undetected in the Linux kernel for 16 years. Kim demonstrated the issue through a proof-of-concept exploit and indicated that a full escape exploit exists but will not be released in the near future. Google awarded $250,000 through its kernelCTF bug-bounty program for the discovery.
The second vulnerability, tracked as CVE-2026-43499 and called GhostLock, exists in the kernel’s futex priority-inheritance mechanism, a system designed to prevent important tasks from being delayed by less critical operations. Researchers from Nebula Security identified the flaw using Vega, an AI-assisted vulnerability scanner. The defect is another use-after-free vulnerability that occurs in a specific code path during lock operations, leaving the kernel with a reference to freed memory. Researchers successfully demonstrated privilege escalation from limited user rights to root access by exploiting this flaw. The vulnerability had persisted in the codebase since 2011 and received a severity rating of 7.8 out of 10. Google awarded $92,337 for this discovery through the same kernelCTF program.
Both vulnerabilities have been patched in the Linux kernel. Linux users are advised to verify that their respective distributions have applied the necessary security updates.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI