Two significant vulnerabilities were identified in the Linux operating system, both enabling unauthorized privilege escalation and posing substantial security risks to systems using affected versions.
The first vulnerability, designated CVE-2026-53359 and named Januscape, resides in KVM (Kernel Virtual Machine), a virtualization component included in many Linux distribution kernels. This flaw permits untrusted guest virtual machines to break out of their isolated containers and gain root-level access to the underlying host system. The vulnerability affects KVM implementations running on both AMD and Intel processors and exploits bugs in the KVM guest-side components. Researcher Hyunwoo Kim, who discovered the flaw, noted that an attacker with access to a single rented instance on a public cloud could potentially cause denial-of-service attacks affecting other tenant virtual machines on the same physical hardware or achieve remote code execution with root privileges. The vulnerability persisted undetected in the Linux kernel for 16 years. Google awarded $250,000 through its kernelCTF bug-bounty program for the vulnerability’s responsible disclosure.
The second vulnerability, tracked as CVE-2026-43499 and named GhostLock, allows users with limited system privileges to escalate their access to root level. Researchers from Nebula Security identified this flaw using Vega, an artificial intelligence-assisted vulnerability scanner. The vulnerability exists in the kernel’s futex priority-inheritance machinery, which manages task scheduling to prevent lower-priority tasks from blocking higher-priority ones. A rare execution path in the cleanup process causes the kernel to retain a pointer to already-freed memory, creating a classic use-after-free condition. This vulnerability remained undetected for 15 years. Nebula Security received $92,337 through Google’s kernelCTF program for its discovery. The flaw carries a severity rating of 7.8 out of 10.
Both vulnerabilities have received patches in the Linux kernel. System administrators and Linux users are advised to verify that security updates have been applied to their particular distributions.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI