Published on: 07 July 2026
Published on: 07 July 2026
A vulnerability ("Januscape") is found in the Linux kernel. This vulnerability could allow attackers running malicious code inside a virtual machine and sending crafted requests to abuse a hypervisor bug, leading the guest-to-host escape and potentially elevation of privilege.
Reports indicated that proof-of-concept (PoC) exploit code is publicly available for a guest-to-host escape vulnerability (Januscape, CVE-2026-53359) and it is at high risk of exploitation. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Successful exploitation of the vulnerability could lead to denial of service and elevation of privilege on an affected system.
The vulnerability is fixed in some of the affected Linux distributions including Debian, Red Hat, SUSE and Ubuntu. The following is only a sample list of Linux distributions that are affected. The list is not exhaustive and it is strongly recommended to consult the product vendors if the used Linux systems are affected. System administrators should check with their product vendors to confirm if their Linux systems are affected and the availability of patches, and if so, apply the patches or follow the recommendations provided by the product vendors to mitigate the risk.