{"vulnerability": "cve-2026-53359", "sightings": [{"uuid": "22835299-3a22-48e5-a5b0-3ca64b9a8ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/officesmtpseller/1003", "content": "Update On 2fa Links Outage \n\n\nour servers were effected by a vulnerability that cause the servers to go shutdown.\n\nMaintenance Update Notice\n\nThe kernel update to patch CVE-2026-53359 has been successfully completed.\n\nIf you experience any issues or notice anything unusual with your services, please do not hesitate to open a support ticket with us.\n\nThank you for your patience and cooperation.\n\n\n@shacoder", "creation_timestamp": "2026-07-30T05:00:04.387599Z"}, {"uuid": "23e94066-373e-49ef-be44-ed5ece9bec3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/425", "content": "\ud83d\udee0 Update on CVE-2026-53359 (\"Januscape\"): the proper fix is here\n\nHi everyone. Our earlier mitigation was a hotfix, a temporary and forced measure. The proper fix is now available, so the hotfix is no longer needed.\n\nTL;DR: Disabling nested virtualization is no longer needed. It was a hotfix, and for some setups it wasn't even possible. The real fix is a kernel bump.\n\nIf you already applied it, roll it back and upgrade instead.\n\nGeneric Linux: make sure you're on Linux 6.18.38 or newer (with the fixes).\nSafe kernel versions across all branches:\n6.1.177 \u00b7 6.6.144 \u00b7 6.12.95 \u00b7 6.18.38 \u00b7 7.1.3 \u00b7 7.2-rc1\n\nFor Talos, follow the runbook below\ud83d\udc47", "creation_timestamp": "2026-07-30T01:00:16.235660Z"}, {"uuid": "ec0883d7-b824-4978-b4a6-df4d545065fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-08-01T15:00:04.569000Z"}, {"uuid": "ed1e1eb8-ec5a-452d-bfd3-5c617dcccd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/officesmtpseller/1003", "content": "Update On 2fa Links Outage \n\n\nour servers were effected by a vulnerability that cause the servers to go shutdown.\n\nMaintenance Update Notice\n\nThe kernel update to patch CVE-2026-53359 has been successfully completed.\n\nIf you experience any issues or notice anything unusual with your services, please do not hesitate to open a support ticket with us.\n\nThank you for your patience and cooperation.\n\n\n@shacoder", "creation_timestamp": "2026-07-31T00:00:39.166860Z"}, {"uuid": "ea686f8b-ab12-4f77-bdec-5e5100d3ae74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260803", "content": "", "creation_timestamp": "2026-08-03T10:46:34.608998Z"}, {"uuid": "1f198694-ef36-4557-b1f2-ffcb54edbc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-08-02T00:00:43.231486Z"}, {"uuid": "aec88b6a-3f7f-4b88-8987-7082fa510071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3msjwazl5x72z", "content": "VM\u3092\u300c\u4e00\u679a\u306e\u58c1\u300d\u3060\u3068\u601d\u3063\u3066\u308b\u3068\u3001\u3053\u3046\u3044\u3046\u7a74\u3067\u8db3\u5143\u3092\u63ac\u308f\u308c\u308b\u3002\n\nCVE-2026-53359\u306fLinux KVM/x86\u306eshadow paging\u306b\u3042\u308buse-after-free\u3002\u4eee\u60f3\u30de\u30b7\u30f3\u306e\u4e2d\u3067\u8d77\u304d\u305f\u64cd\u4f5c\u304c\u3001\u6761\u4ef6\u6b21\u7b2c\u3067\u30db\u30b9\u30c8\u5074\u306e\u30e1\u30e2\u30ea\u7834\u58ca\u3078\u7e4b\u304c\u308b\u3002\u58c1\u306e\u5185\u5074\u3060\u3051\u898b\u3066\u5b89\u5fc3\u3059\u308b\u8a2d\u8a08\u3001\u7518\u3047\u305e\u3002\u26a0\ufe0f\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53359\n#Linux #KVM #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-08-08T01:29:40.138982Z"}, {"uuid": "6a6c2fdf-e503-4fec-acf3-5d5d17ed0cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "exploited", "source": "https://t.me/HackerNewscyber/3313", "content": "\u2708\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abJanuscape\u00bb \u0627\u0645\u06a9\u0627\u0646 \u0641\u0631\u0627\u0631 \u0627\u0632 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u0628\u0647 \u0647\u0627\u0633\u062a \u062f\u0631 KVM/x86 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\n\n\ud83c\udfa5\u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc Hyunwoo Kim \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-53359 \u0648 \u0646\u0627\u0645 \u00abJanuscape\u00bb \u0631\u0627 \u0627\u0641\u0634\u0627 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u06cc\u06a9 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u0645\u0647\u0645\u0627\u0646 (guest) \u062f\u0631 \u0645\u062d\u06cc\u0637 KVM \u0628\u0631 \u067e\u0627\u06cc\u0647 \u0645\u0639\u0645\u0627\u0631\u06cc x86 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0645\u06cc\u0632\u0628\u0627\u0646 (host) \u0646\u0641\u0648\u0630 \u06a9\u0646\u062f. \u0637\u0628\u0642 \u0627\u062f\u0639\u0627\u06cc \u0627\u06cc\u0646 \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u060c \u0627\u06cc\u0646 \u0646\u062e\u0633\u062a\u06cc\u0646 \u062a\u062d\u0642\u06cc\u0642 \u0639\u0645\u0648\u0645\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u062d\u0645\u0644\u0647 \u0641\u0631\u0627\u0631 \u0627\u0632 \u0645\u0647\u0645\u0627\u0646 \u0628\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0645 \u0631\u0648\u06cc \u067e\u0631\u062f\u0627\u0632\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0644 \u0648 \u0647\u0645 AMD \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627\u0633\u062a.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc \u062d\u0627\u0641\u0638\u0647 (use-after-free) \u062f\u0631 \u0628\u062e\u0634 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u062d\u0627\u0641\u0638\u0647 KVM \u0627\u0633\u062a\u060c \u0635\u0631\u0641\u0627\u064b \u0628\u0627 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0633\u0645\u062a \u0645\u0647\u0645\u0627\u0646 \u0642\u0627\u0628\u0644 \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062d\u0627\u0641\u0638\u0647 \u0647\u0633\u062a\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0631\u0627 \u062f\u0686\u0627\u0631 \u062e\u0631\u0627\u0628\u06cc \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0627\u0628\u0631\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0686\u0646\u062f\u0645\u0633\u062a\u0623\u062c\u0631\u06cc \u0645\u0627\u0646\u0646\u062f \u06af\u0648\u06af\u0644 \u06a9\u0644\u0627\u0648\u062f \u0648 \u0622\u0645\u0627\u0632\u0648\u0646 \u0631\u0627 \u06a9\u0647 \u0627\u0632 \u0645\u062c\u0627\u0632\u06cc\u200c\u0633\u0627\u0632\u06cc \u062a\u0648\u062f\u0631\u062a\u0648 (nested virtualization) \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u062a\u0647\u062f\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0622\u0632\u0645\u0648\u0646 kvmCTF \u06af\u0648\u06af\u0644 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062d\u0641\u0631\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 (zero-day) \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa4\u067e\u06cc\u0627\u0645\u062f\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0627\u0645\u0644 \u062f\u0648 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0627\u0633\u062a: \u0646\u062e\u0633\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0646\u062f\u0627\u062e\u062a\u0646 \u0647\u0633\u062a\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u062a\u0645\u0627\u0645 \u0645\u0627\u0634\u06cc\u0646\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632\u06cc \u0631\u0648\u06cc \u0647\u0645\u0627\u0646 \u0633\u062e\u062a\u200c\u0627\u0641\u0632\u0627\u0631 \u0641\u06cc\u0632\u06cc\u06a9\u06cc (DoS)\u060c \u06cc\u0627 \u062d\u062a\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 \u0631\u0648\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646 \u0628\u0631\u0627\u06cc \u062a\u0635\u0631\u0641 \u06a9\u0627\u0645\u0644 \u0622\u0646. \u062f\u0648\u0645\u060c \u062f\u0631 \u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f RHEL \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 KVM \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627\u0632 \u0627\u0633\u062a\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0631\u062a\u0642\u0627\u06cc \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u0644\u06cc (LPE) \u0646\u06cc\u0632 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f0 \u062f\u0631 \u06a9\u062f \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0648 \u062d\u062f\u0648\u062f \u06f1\u06f6 \u0633\u0627\u0644 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u067e\u0646\u0647\u0627\u0646 \u0628\u0627\u0642\u06cc \u0645\u0627\u0646\u062f\u0647 \u0628\u0648\u062f. \u0637\u0628\u0642 \u0627\u0639\u0644\u0627\u0645 \u0645\u062d\u0642\u0642\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0641\u0642\u0637 \u0645\u0639\u0645\u0627\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0644 \u0648 AMD \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc ARM64 \u0645\u0631\u0628\u0648\u0637 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0647\u0631\u0686\u0646\u062f \u0648\u0635\u0644\u0647\u200c\u0646\u0634\u062f\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0628\u0644\u06cc \u0645\u0648\u0633\u0648\u0645 \u0628\u0647 \u00abITScape\u00bb \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc ARM64 \u0631\u0627 \u0646\u06cc\u0632 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646\u200c\u0647\u0627\u06cc KVM \u0686\u0646\u062f\u0645\u0633\u062a\u0623\u062c\u0631\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0622\u062e\u0631\u06cc\u0646 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0647\u0633\u062a\u0647 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-05T14:00:06.438456Z"}, {"uuid": "f00d8a75-f6aa-44b3-b249-ea32b23725cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/inboxsmtpshops/1372", "content": "Update On 2fa Links Outage \n\n\nour servers were effected by a vulnerability that cause the servers to go shutdown.\n\nMaintenance Update Notice\n\nThe kernel update to patch CVE-2026-53359 has been successfully completed.\n\nIf you experience any issues or notice anything unusual with your services, please do not hesitate to open a support ticket with us.\n\nThank you for your patience and cooperation.\n\n\n@Inboxseller", "creation_timestamp": "2026-08-08T17:00:34.775901Z"}, {"uuid": "66fa051c-94ed-4b6f-83d8-405222cb15f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/inboxsmtpshops/1372", "content": "Update On 2fa Links Outage \n\n\nour servers were effected by a vulnerability that cause the servers to go shutdown.\n\nMaintenance Update Notice\n\nThe kernel update to patch CVE-2026-53359 has been successfully completed.\n\nIf you experience any issues or notice anything unusual with your services, please do not hesitate to open a support ticket with us.\n\nThank you for your patience and cooperation.\n\n\n@Inboxseller", "creation_timestamp": "2026-08-09T00:46:42.973082Z"}, {"uuid": "81807c64-2c38-4f28-a193-696d42b73780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "exploited", "source": "https://t.me/HackerNewscyber/3313", "content": "\u2708\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abJanuscape\u00bb \u0627\u0645\u06a9\u0627\u0646 \u0641\u0631\u0627\u0631 \u0627\u0632 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u0628\u0647 \u0647\u0627\u0633\u062a \u062f\u0631 KVM/x86 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\n\n\ud83c\udfa5\u067e\u0698\u0648\u0647\u0634\u06af\u0631 \u0627\u0645\u0646\u06cc\u062a\u06cc Hyunwoo Kim \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-53359 \u0648 \u0646\u0627\u0645 \u00abJanuscape\u00bb \u0631\u0627 \u0627\u0641\u0634\u0627 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u0627\u0632 \u06cc\u06a9 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u0645\u0647\u0645\u0627\u0646 (guest) \u062f\u0631 \u0645\u062d\u06cc\u0637 KVM \u0628\u0631 \u067e\u0627\u06cc\u0647 \u0645\u0639\u0645\u0627\u0631\u06cc x86 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0645\u06cc\u0632\u0628\u0627\u0646 (host) \u0646\u0641\u0648\u0630 \u06a9\u0646\u062f. \u0637\u0628\u0642 \u0627\u062f\u0639\u0627\u06cc \u0627\u06cc\u0646 \u067e\u0698\u0648\u0647\u0634\u06af\u0631\u060c \u0627\u06cc\u0646 \u0646\u062e\u0633\u062a\u06cc\u0646 \u062a\u062d\u0642\u06cc\u0642 \u0639\u0645\u0648\u0645\u06cc \u062f\u0631\u0628\u0627\u0631\u0647 \u062d\u0645\u0644\u0647 \u0641\u0631\u0627\u0631 \u0627\u0632 \u0645\u0647\u0645\u0627\u0646 \u0628\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0645 \u0631\u0648\u06cc \u067e\u0631\u062f\u0627\u0632\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0644 \u0648 \u0647\u0645 AMD \u0642\u0627\u0628\u0644 \u0627\u062c\u0631\u0627\u0633\u062a.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0627\u0632 \u0646\u0648\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u067e\u0633 \u0627\u0632 \u0622\u0632\u0627\u062f\u0633\u0627\u0632\u06cc \u062d\u0627\u0641\u0638\u0647 (use-after-free) \u062f\u0631 \u0628\u062e\u0634 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc \u062d\u0627\u0641\u0638\u0647 KVM \u0627\u0633\u062a\u060c \u0635\u0631\u0641\u0627\u064b \u0628\u0627 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0633\u0645\u062a \u0645\u0647\u0645\u0627\u0646 \u0642\u0627\u0628\u0644 \u0641\u0639\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062d\u0627\u0641\u0638\u0647 \u0647\u0633\u062a\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0631\u0627 \u062f\u0686\u0627\u0631 \u062e\u0631\u0627\u0628\u06cc \u06a9\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0627\u0628\u0631\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc \u0686\u0646\u062f\u0645\u0633\u062a\u0623\u062c\u0631\u06cc \u0645\u0627\u0646\u0646\u062f \u06af\u0648\u06af\u0644 \u06a9\u0644\u0627\u0648\u062f \u0648 \u0622\u0645\u0627\u0632\u0648\u0646 \u0631\u0627 \u06a9\u0647 \u0627\u0632 \u0645\u062c\u0627\u0632\u06cc\u200c\u0633\u0627\u0632\u06cc \u062a\u0648\u062f\u0631\u062a\u0648 (nested virtualization) \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u062a\u0647\u062f\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u062f\u0631 \u0622\u0632\u0645\u0648\u0646 kvmCTF \u06af\u0648\u06af\u0644 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u06cc\u06a9 \u062d\u0641\u0631\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 (zero-day) \u0628\u0627 \u0645\u0648\u0641\u0642\u06cc\u062a \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\ud83c\udfa4\u067e\u06cc\u0627\u0645\u062f\u0647\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0634\u0627\u0645\u0644 \u062f\u0648 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0627\u0633\u062a: \u0646\u062e\u0633\u062a\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0646\u062f\u0627\u062e\u062a\u0646 \u0647\u0633\u062a\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u062a\u0645\u0627\u0645 \u0645\u0627\u0634\u06cc\u0646\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632\u06cc \u0631\u0648\u06cc \u0647\u0645\u0627\u0646 \u0633\u062e\u062a\u200c\u0627\u0641\u0632\u0627\u0631 \u0641\u06cc\u0632\u06cc\u06a9\u06cc (DoS)\u060c \u06cc\u0627 \u062d\u062a\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 \u0631\u0648\u06cc \u0645\u06cc\u0632\u0628\u0627\u0646 \u0628\u0631\u0627\u06cc \u062a\u0635\u0631\u0641 \u06a9\u0627\u0645\u0644 \u0622\u0646. \u062f\u0648\u0645\u060c \u062f\u0631 \u062a\u0648\u0632\u06cc\u0639\u200c\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f RHEL \u06a9\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 KVM \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0627\u0632 \u0627\u0633\u062a\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0631\u062a\u0642\u0627\u06cc \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u0644\u06cc (LPE) \u0646\u06cc\u0632 \u0645\u0646\u062c\u0631 \u0634\u0648\u062f.\n\n\ud83c\udfa5\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f0 \u062f\u0631 \u06a9\u062f \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a\u0647 \u0648 \u062d\u062f\u0648\u062f \u06f1\u06f6 \u0633\u0627\u0644 \u0628\u0647\u200c\u0635\u0648\u0631\u062a \u067e\u0646\u0647\u0627\u0646 \u0628\u0627\u0642\u06cc \u0645\u0627\u0646\u062f\u0647 \u0628\u0648\u062f. \u0637\u0628\u0642 \u0627\u0639\u0644\u0627\u0645 \u0645\u062d\u0642\u0642\u060c \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0641\u0642\u0637 \u0645\u0639\u0645\u0627\u0631\u06cc\u200c\u0647\u0627\u06cc \u0627\u06cc\u0646\u062a\u0644 \u0648 AMD \u0631\u0627 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \u0648 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc ARM64 \u0645\u0631\u0628\u0648\u0637 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0647\u0631\u0686\u0646\u062f \u0648\u0635\u0644\u0647\u200c\u0646\u0634\u062f\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0628\u0644\u06cc \u0645\u0648\u0633\u0648\u0645 \u0628\u0647 \u00abITScape\u00bb \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc ARM64 \u0631\u0627 \u0646\u06cc\u0632 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u0628\u0647 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0645\u06cc\u0632\u0628\u0627\u0646\u200c\u0647\u0627\u06cc KVM \u0686\u0646\u062f\u0645\u0633\u062a\u0623\u062c\u0631\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0622\u062e\u0631\u06cc\u0646 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0647\u0633\u062a\u0647 \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u06a9\u0646\u0646\u062f.\n\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-08-06T00:00:37.962386Z"}, {"uuid": "62e34f58-05c9-4c10-9fd3-1b9d043220c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8562", "content": "\u0412 \u0446\u0435\u043b\u043e\u043c, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Trail of Bits\u00a0\u0410\u0440\u0442\u0435\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u0430\u0433\u0435\u043d\u0442 \u0418\u0418 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u043a\u0438\u0434\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 QEMU/KVM, \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0442\u0430\u0432\u044f\u0442 \u043f\u043e\u0434 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u043e\u0432\u0435\u043b \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Patch the Planet \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a GPT 5.6-Cyber. \u041e\u043d \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0435\u0434 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0437\u0430\u0434\u0430\u0447\u0443 \u0432 \u0441\u0442\u0438\u043b\u0435 CTF: \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b Debian 12, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 Linux \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c AMD Zen 3, \u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438.\n\n\u0410\u0433\u0435\u043d\u0442\u0443 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u0438 \u0435\u043c\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u041f\u041e, \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433\u0430, \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432, \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043e\u0442 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u043a\u043e\u0434\u0430 \u0438 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0435 \u043e\u0440\u0430\u043a\u0443\u043b\u044b, \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 12-\u0447\u0430\u0441\u043e\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 Januscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2026-53359, - \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0425\u043e\u0442\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e, \u0430\u0433\u0435\u043d\u0442 \u0441\u043e\u0437\u0434\u0430\u043b \u0435\u0433\u043e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u0447\u0430\u0441. \u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u044e \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043d\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u043e \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Debian.\n\n\u0417\u0430\u0442\u0435\u043c \u0430\u0433\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u0443\u0442\u044c \u0447\u0435\u0440\u0435\u0437 libslirp, \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e QEMU. \u0412 Debian 12 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u0435\u0440\u0441\u0438\u044f libslirp 4.7.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2026-9539.\n\n\u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVE, \u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0445\u043e\u0441\u0442\u0430.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043b QEMU \u0438 libslirp \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 \u043e\u0442\u0432\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b QEMU, KVM, \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0441\u043e\u0431\u0440\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0443\u044e \u0442\u0440\u0438 0-day \u0438 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c KVM, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0430 \u044f\u0434\u0440\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430.\n\n\u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0445\u043e\u0434\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0430 VAPIC \u0432 QEMU, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0434\u043a\u0430\u0447\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0438 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 libslirp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c.\n\n\u0410\u0433\u0435\u043d\u0442 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 QEMU, CUPS \u0438 libslirp, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0434\u043b\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418.\n\n\u0411\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0441 \u0431\u043e\u043b\u0435\u0435 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0440\u0438\u0441\u043a\u043e\u0432\u0430\u043d\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0433\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043d\u0435\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\nTrail of Bits \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Firecracker, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\n\u041d\u043e\u0432\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0445\u043e\u0441\u0442\u0430.", "creation_timestamp": "2026-08-31T19:00:05.051564Z"}, {"uuid": "53ee89ea-bc44-46c3-9c0b-82f76386d376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xdypkvl24", "content": "~Trailofbits~\nGPT 5.6-Cyber escaped QEMU/KVM VMs three times using known, unpatched, and zero-day flaws.\n-\nIOCs: CVE-2026-53359, CVE-2026-9539\n-\n#AI #ThreatIntel #VM", "creation_timestamp": "2026-08-29T13:12:58.931477Z"}, {"uuid": "a877f763-a2a4-4534-89c4-4d15360ea0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/winsontang.com/post/3mtfuog5qns2w", "content": "Introducing Januscape: a groundbreaking solution for guest-to-host escapes in KVM/x86 environments. Learn how CVE-2026-53359 impacts security and discover innovative ways to protect your systems. Stay informed and secure!\n\nhttps://github.com/V4bel/Januscape", "creation_timestamp": "2026-08-19T04:15:54.685711Z"}, {"uuid": "6beeb024-2bf0-44b6-99f8-cc50bfae577d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpttwie53x23", "content": "CVE-2026-53359 - KVM: x86: Fix shadow paging use-after-free due to unexpected role\nCVE ID : CVE-2026-53359\n \n Published : July 4, 2026, 12:17 p.m. | 7\u00a0hours, 30\u00a0minutes ago\n \n Description : In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Fix shad...", "creation_timestamp": "2026-07-04T19:59:00.967681Z"}, {"uuid": "0e68c368-0ccc-4561-8566-ba9dd0db3554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpunaasf442y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u0432 \u044f\u0434\u0440\u0435 Linux: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\n\n\n\nhttps://kripta.biz/posts/F9CDFDE2-37AC-4BC1-839E-6020F968C338", "creation_timestamp": "2026-07-05T03:31:57.012156Z"}, {"uuid": "dd794a68-2a04-4caf-bed5-8060931740c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116865551315118647", "content": "A severe vulnerability was disclosed for Linux Kernel (CVE-2026-53359) https://vuldb.com/vuln/376323", "creation_timestamp": "2026-07-05T04:46:36.638474Z"}, {"uuid": "5e930966-8f18-4944-a368-dd30a87125bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/askfred.be/post/3mpuz3gyt2z23", "content": "I had to sit with the latest Linux stable kernel releases for a minute. Greg Kroah-Hartman pushed out seven updates, and tucked inside is a fix for a KVM use-after-free vulnerability (CVE-2026-53359) that was actually introduced all the way back in kernel version 2.6.36.", "creation_timestamp": "2026-07-05T07:03:55.698929Z"}, {"uuid": "5d8147d5-dedb-4636-ada4-935b17f1763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T06:53:31.960797Z"}, {"uuid": "52accd86-6905-42c0-9d2d-50990cf612e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/116874019977365878", "content": "Oh, goodie. KVM Guest-to-Host escape\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:18.875429Z"}, {"uuid": "09c98d49-f641-401e-a4ad-e71ba71980d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3mpyjr3o4weo2", "content": "Oh, goodie. KVM Guest-to-Host escape\n\n\"Januscape (CVE-2026-53359)\" -- https://github.com/V4bel/Januscape\n\nhttps://www.openwall.com/lists/oss-security/2026/07/06/7", "creation_timestamp": "2026-07-06T16:40:38.808871Z"}, {"uuid": "4e6681fb-052a-46f5-97f2-9d25f5b3e4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpykhay4su2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)", "creation_timestamp": "2026-07-06T16:52:45.031950Z"}, {"uuid": "de18a5ba-b247-4d0d-90a2-6e050acf5be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpyl7a53oo26", "content": "Researchers disclosed a PoC for the Januscape KVM escape (CVE-2026-53359). This use-after-free KVM bug impacts public clouds, allowing host panics and LPE.\n\n#Januscape #KVMEscape #CVE202653359 #CyberSecurity #0day", "creation_timestamp": "2026-07-06T17:06:09.848148Z"}, {"uuid": "6d4b7857-11cd-4017-b8a8-dc1522530eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116874224446929748", "content": "\u203c\ufe0f New Dark Web Informer Blog Post!\nTitle: A Long-Lived KVM Bug Resurfaces: Shadow Paging Use-After-Free in the Linux Kernel (CVE-2026-53359)\nLink: https://darkwebinformer.com/a-long-lived-kvm-bug-resurfaces-shadow-paging-use-after-free-in-the-linux-kernel-cve-2026-53359/", "creation_timestamp": "2026-07-06T17:32:18.225958Z"}, {"uuid": "c56690b2-9f13-46bb-a324-740224bdb464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bestofhn.bsky.social/post/3mpyp5ldmoa2q", "content": "A guest-to-host VM escape exploit against KVM on x86 (CVE-2026-53359), released open source with a writeup.\n\nSubmit to upvote on HN\nhttps://news.ycombinator.com/submitlink?u=https%3A%2F%2Fgithub.com%2FV4bel%2FJanuscape&t=Januscape%3A%20Guest-to-Host%20Escape%20in%20KVM%2Fx86%20%5BCVE-2026-53359%5D", "creation_timestamp": "2026-07-06T18:16:49.470749Z"}, {"uuid": "542a9219-7fe5-4192-9df3-f422f0047346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mpypvjfaoc2v", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\ncomments \u00b7 posted on 2026.07.06 at 13:35:03 (c=1, p=5)", "creation_timestamp": "2026-07-06T18:30:12.440323Z"}, {"uuid": "b25f3bd0-cb8b-4f92-a7be-431bfcee9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mpypwr5whs2z", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nhttps://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-06T18:30:53.961579Z"}, {"uuid": "84225216-99ed-4661-8748-1942f0eff8dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.bsky.social/post/3mpypyvuc5r2i", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\n\nDiscussion", "creation_timestamp": "2026-07-06T18:32:06.361306Z"}, {"uuid": "3a335685-6c72-4ce0-befa-46b290898276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpyq4y4jw22x", "content": "Januscape (CVE-2026-53359) is a KVM shadow-MMU use-after-free flaw enabling guest-to-host corruption on Intel and AMD, with potential for host code execution.\n", "creation_timestamp": "2026-07-06T18:34:23.090195Z"}, {"uuid": "e816ebb5-2357-4d4b-843d-334523b95175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mpyrusp63r2w", "content": "A critical vulnerability dubbed \u2018Januscape\u2018 (CVE-2026-53359) allows a guest virtual machine to panic or potentially execute code on the host [\u2026]", "creation_timestamp": "2026-07-06T19:05:36.014975Z"}, {"uuid": "ad58168d-6e41-4116-96a8-9211edff0375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpyrvo7efd2u", "content": "\ud83e\udd16 CVE-2026-53359 (Januscape): 16-year-old KVM use-after-free allows guest VM escape to host on Intel & AMD x86. Public PoC crashes the host kernel.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-06T19:06:04.744045Z"}, {"uuid": "60dc6d24-869a-4674-b310-092a95b1edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpysiv6jxm24", "content": "Januscape (CVE-2026-53359): 16-Year-Old Linux KVM Flaw Allows Guest-to-Host VM Escape\n\nhttps://blindthoughts.com/januscape-cve-2026-53359-kvm-guest-host-escape\n\n#linuxkernel #kvm #virtualization #cve #hypervisorsecurity", "creation_timestamp": "2026-07-06T19:16:49.716997Z"}, {"uuid": "81597e09-ac83-4281-b6f0-ed179ea34510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/redsiege.com/post/3mpytar6r3m2y", "content": "Researchers disclosed Januscape (CVE-2026-53359), a 16-year-old flaw in the Linux KVM hypervisor that could allow attackers to escape from a guest virtual machine to the host on both Intel and AMD x86 systems. \n\nvia The Hacker News", "creation_timestamp": "2026-07-06T19:30:12.949960Z"}, {"uuid": "d70a60fe-1449-41fa-b4bd-842de705390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn20.e-work.xyz/post/3mpytigbcor2o", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T19:34:28.300792Z"}, {"uuid": "bc180b18-2257-419a-9b4c-a48091866793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mpyv6g2ydf2w", "content": "Januscape: a 16-year-old Linux KVM flaw (CVE-2026-53359) lets a guest VM take down the host on Intel and AMD. Multi-tenant & ICS virtualization at risk.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/januscape-kvm-guest-to-host-escape-cve-2026-53359-2026", "creation_timestamp": "2026-07-06T20:04:39.616232Z"}, {"uuid": "24ae5c9e-04f8-47df-8f1a-5a1c3e2448f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/betterhn50.e-work.xyz/post/3mpyy6sixif2l", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] https://github.com/V4bel/Januscape (https://news.ycombinator.com/item?id=48807908)", "creation_timestamp": "2026-07-06T20:58:34.062286Z"}, {"uuid": "c551e1a2-6d80-4d94-b995-27b59959731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsbot.bsky.social/post/3mpyybkufeh26", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] | Discussion", "creation_timestamp": "2026-07-06T21:00:06.831752Z"}, {"uuid": "1d41deea-5fba-4128-a97f-89bd12a43ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpyysmvsec2q", "content": "Januscape (CVE-2026-53359): A Silent 16-Year Linux KVM Flaw That Can Collapse Cloud Hosts From Inside a Guest Machine +\u00a0Video\n\nIntroduction: A Hidden Crack Inside the Virtualization Core of Linux A newly disclosed vulnerability in the Linux Kernel-based Virtual Machine (KVM) subsystem has shaken\u2026", "creation_timestamp": "2026-07-06T21:09:39.456010Z"}, {"uuid": "c7212098-9719-4438-b213-1b357f3635ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpz4idj4gf2i", "content": "Linux KVM flaw CVE-2026-53359, Januscape, lets a guest VM trigger host panic and possible code execution on x86 Intel and AMD systems via a shadow MMU use-after-free bug. #Januscape #CVE202653359 #LinuxKernel", "creation_timestamp": "2026-07-06T22:15:29.198199Z"}, {"uuid": "0ed3993a-fb82-49d2-a602-ea5dad7e4a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpz36g6upo2j", "content": "We have two patched kernels ready for testing: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nBoth are serious Linux kernel vulnerabilities. \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-06T21:52:02.280356Z"}, {"uuid": "6442cca6-209a-4444-b54a-626983d1847f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hackernewsrobot.bsky.social/post/3mpz3apis6k2n", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]", "creation_timestamp": "2026-07-06T21:53:19.379317Z"}, {"uuid": "8b91e684-ae40-4e48-9be9-1b26d0d0cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-06T22:00:59.348494Z"}, {"uuid": "0c70e8a8-89ee-4e27-bc43-3539f535a3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpz3r7nofn2l", "content": "\ud83d\udd12 Januscape: Guest-to-Host Escape in KVM/x86 (CVE-2026-53359)\n\nJanuscape (CVE-2026-53359) is a critical KVM escape vulnerability that allows a guest virtual machine to break out and...\n\nhttps://tinyurl.com/24ff7g8a #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-07-06T22:02:32.492409Z"}, {"uuid": "f39263ef-4f49-4f4d-87c9-4e191b76373a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3mpzbyjgsks2h", "content": "Linux Kernel\u306e\u8106\u5f31\u6027(Januscape: CVE-2026-53359)\n\n#security #vulnerability #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027 #linux #kernel #kvm \n\nsecurity.sios.jp/vulnerabilit...", "creation_timestamp": "2026-07-06T23:54:02.501723Z"}, {"uuid": "206dd3ad-a5a8-4245-8782-cb85556b8a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.mastodon.social.ap.brid.gy/post/3mpzfhctp77m2", "content": "MT @v4bel@x.com\n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)\n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.\n\n\"16 years\" latent. Successfully used as a 0-day [\u2026]", "creation_timestamp": "2026-07-07T00:56:08.429463Z"}, {"uuid": "e40fe421-e0bb-4585-a670-f755b483b5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "content": "A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it.\n\nDubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD. The public proof-of-concept panics the host; the researcher claims that a separate, unreleased exploit", "creation_timestamp": "2026-07-07T01:00:43.309126Z"}, {"uuid": "307733ab-a8a5-4fb2-a6f2-d5a6f1002b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/almalinux.org/post/3mpzg5g3tgy2a", "content": "We have patched kernels ready for testing for two Linux kernel vulnerabilities: Januscape (CVE-2026-53359) and Bad Epoll (CVE-2026-46242). \n\nLearn more and help with testing: https://almalinux.org/blog/2026-07-06-januscape-bad-epoll/?utm_medium=social&utm_source=bluesky", "creation_timestamp": "2026-07-07T01:08:19.655185Z"}, {"uuid": "dad99e44-ced6-413a-94a5-0eb4e192a5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/dacbarbos.eurosky.social/post/3mpzhml7m6k2r", "content": "MT @v4bel@x.com \n\ud83d\udca5 Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested virtualization.  \n\nDetails: januscape.io\n\n#infosec #januscape #kvm", "creation_timestamp": "2026-07-07T01:34:44.076853Z"}, {"uuid": "5a6fe347-9194-4b85-b065-e9f6e9c828ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newsycombinatorbot.bsky.social/post/3mpzhvrhlpp24", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359] (github.com)\n\nDiscussion | Main Link", "creation_timestamp": "2026-07-07T01:39:50.578595Z"}, {"uuid": "3a34ea56-d8bd-44d2-ade6-633d01d6bd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpzo27sqra2b", "content": "\ud83e\udd16 CVE-2026-53359 ('Januscape'): 16-year-old KVM use-after-free allows guest VM escape to host on Intel/AMD x86. PoC published. Full exploit path suspected.\nhttps://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-07T03:29:42.323328Z"}, {"uuid": "4867ee03-cb0a-40b6-bf0c-a5fde3707293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mpznifdjii2k", "content": "Januscape (CVE-2026-53359): The 16-Year-Old KVM Bug That Lets a Guest VM Take Down Its\u00a0Host\n\nCVE-2026-53359, dubbed Januscape, is a 16-year-old KVM use-after-free letting guest VMs crash or escalate into the host.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-53359-januscape-kvm-guest-to-host-escape/", "creation_timestamp": "2026-07-07T03:19:44.852116Z"}, {"uuid": "7662a00a-c61d-4e17-8ab8-8ed914039195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mpzvg6wlf727", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\n\n github.com -> \n\nCVE-2026-53359\n\n\nOriginal->", "creation_timestamp": "2026-07-07T05:41:40.210484Z"}, {"uuid": "dacdf016-87fc-4246-9f5d-8dbb58a2a4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mq24d5odp22f", "content": "Januscape: Guest-to-Host Escape in KVM/x86 [CVE-2026-53359]\nhttps://github.com/V4bel/Januscape\n\nhttps://news.ycombinator.com/item?id=48807908", "creation_timestamp": "2026-07-07T07:45:16.450987Z"}, {"uuid": "f8e51e5d-b554-4d97-b13b-a509ffa799fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hn-frontpage-bot.bsky.social/post/3mq27y7nazd2l", "content": "The Januscape vulnerability (CVE-2026-53359) is a critical use-after-free flaw in KVM/x86 that enables guest-to-host escapes on Intel and AMD hardware. It threatens multi-tenant clouds by allowing host kernel compromise or DoS, requiring immediate kernel patching.", "creation_timestamp": "2026-07-07T08:50:42.470764Z"}, {"uuid": "f1de6583-6710-4c06-a8b1-2e2636e20f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/android-adepts.bsky.social/post/3mq2epr65oz2w", "content": "\ud83d\udea8 KVM Januscape vulnerability (CVE-2026-53359) discovered: virtual machines can escape host systems! This critical flaw affects Intel & AMD, existing for 16 years. Already exploited as a 0-day, PoC code out, leading to host kernel panics & privilege escalation. Update your systems ASAP!", "creation_timestamp": "2026-07-07T10:15:27.616625Z"}, {"uuid": "d88d5b36-a54a-45c3-9831-764fe39ab345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq2fneiqzy2m", "content": "CVE-2026-53359 (Januscape) is a KVM shadow MMU use-after-free that enables guest-to-host VM escape and host compromise on Intel and AMD.\n", "creation_timestamp": "2026-07-07T10:32:00.998816Z"}, {"uuid": "8c346c04-2868-4484-906a-52e735a8ef7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/adriend.linuxtricks.fr/post/3mq2iqvo5dk2e", "content": "Pour info, la faille #Januscape (CVE-2026-53359) est une faille de type guest-to-host sur KVM ! \nElle permet d'agir (ici un DoS) sur l'h\u00f4te hyperviseur depuis une machine invit\u00e9 !\nEvidemment OLVM, Proxmox, OVirt, etc reposant sur KVM sont vuln\u00e9rables !\n\ncybersecuritynews.com/16-year-old-...", "creation_timestamp": "2026-07-07T11:27:43.099376Z"}, {"uuid": "4ba3823a-5cbf-4d4c-835e-cd1ead5f9fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116878464186548289", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.https://www.securityweek.com/linux-kernel-vulnerability-allows-vm-escape-on-intel-and-amd-systems/", "creation_timestamp": "2026-07-07T11:30:31.388813Z"}, {"uuid": "b7ce395c-7fc9-4440-ba8c-dd76f1528d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mq2iwllx6s2m", "content": "The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems.\n\nwww.securityweek.com/linux-kernel...", "creation_timestamp": "2026-07-07T11:30:52.939602Z"}, {"uuid": "eaeb0d8e-e2ae-46ba-b7a2-2361e25fa45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mq2mbincpo2i", "content": "\ud83d\udcf0 Kerentanan Januscape di Linux Memungkinkan Escape dari Virtual Machine pada Prosesor Intel dan AMD\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/07/januscape-linux-kvm-vm-escape-vulnerability/\n\n#amd #cve-2026-53359 #intel #januscape #kernelLinux #kvm #linux #virtualMachine #", "creation_timestamp": "2026-07-07T12:30:38.628674Z"}, {"uuid": "2c227699-7559-4d76-9873-f399e59f3c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq2n3sw3ze2b", "content": "Linux kernel flaw CVE-2026-53359, nicknamed Januscape, can let attackers escape KVM VMs and execute code on the host. The shadow MMU bug threatens public clouds and nested virtualization. #Januscape #KVM #IntelAMD", "creation_timestamp": "2026-07-07T12:45:21.825677Z"}, {"uuid": "e102c845-4e6e-41e8-8b1a-716989091445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116878901154624597", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:21:38.881829Z"}, {"uuid": "3d6298ef-dd87-49d1-858b-24c4a6630294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mq2p4un7rre2", "content": "Januscape (CVE-2026-53359) Guest-to-Host Escape in KVM/x86 https://github.com/V4bel/Januscape", "creation_timestamp": "2026-07-07T13:22:03.824744Z"}, {"uuid": "cf9e6e5c-841d-420c-b39a-74c3f6d8b10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmdnna22p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.059179Z"}, {"uuid": "7736915c-4b99-480c-a2d3-f11991580203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2qmesfyc2p", "content": "O CVE-2026-53359 (Januscape) permite escape de VM para host no KVM/x86. Falha ativa h\u00e1 16 anos. Atualize seu kernel Fedora 43 para 7.1.3 agora. Saiba mais: ->    tinyurl.com/2c4utfd6", "creation_timestamp": "2026-07-07T13:48:20.506776Z"}, {"uuid": "bd3ff590-7206-4822-b3ab-75c0fbc75036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/exe.dev/post/3mq2s2kogpk2o", "content": "While we validate a kernel change for januscape (CVE-2026-53359), we have disable nested KVM across our fleet for individuals and teams without dedicated hardware. We will restore nested KVM in a rolling release as soon as we can. Apologies for the inconvenience.", "creation_timestamp": "2026-07-07T14:14:08.453547Z"}, {"uuid": "d12ae95b-73c5-4a50-bcdd-51f180b240b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mq2umu4bpq2p", "content": "Dubbed 'Januscape' and tracked as CVE-2026-53359, the flaw sits in the shadow MMU code that KVM shares across both Intel and AMD.", "creation_timestamp": "2026-07-07T15:00:09.672679Z"}, {"uuid": "5dfe2665-724a-4563-80a8-c4ceb9a222d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mq2vhnt5hc24", "content": "Can a 16-year-old bug really blow up cloud security? Yes. Januscape (CVE-2026-53359) is a Linux KVM flaw allowing VM escape on Intel/AMD. If you run VMs, this zero-day means your host could be compromised. Find out how to protect\u2026\n\nhttps://www.tpp.blog/21opoya\n\n#opensource #januscape #cve202653359", "creation_timestamp": "2026-07-07T15:15:09.234790Z"}, {"uuid": "14e74375-89a6-4944-a917-a4bec526805b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wn77tqs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:10.687315Z"}, {"uuid": "80d4205a-f05b-4d99-bed8-3dda5262b86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mq2wna6pzs2p", "content": " \ud83d\udd12 Sysadmins: A atualiza\u00e7\u00e3o cr\u00edtica do #Fedora 43 para kernel-headers 7.1.3 j\u00e1 est\u00e1 dispon\u00edvel! Corrige o CVE-2026-53359 (Januscape) \u2014 um UAF no KVM que permite VM escape ap\u00f3s 16 anos dormentes.   Saiba mais: -> tinyurl.com/yn2njpwk", "creation_timestamp": "2026-07-07T15:36:11.163997Z"}, {"uuid": "fe8be2b1-684f-4261-9f75-d48d11934848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-07T16:00:45.483193Z"}, {"uuid": "e089ac08-950c-4f89-9422-07ab6d64e883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mq33eolbgi2v", "content": "Januscape (CVE-2026-53359) : une faille use-after-free rest\u00e9e 16 ans dans KVM.\n\nLouez un VPS, activez la virtu imbriqu\u00e9e c\u00f4t\u00e9 h\u00f4te, et une seule VM peut faire tomber l'h\u00f4te + toutes les VM voisines.\n\n\u00c0 patcher \ud83d\udc47\nwww.it-connect.fr/januscape-fa...\n\n#linux", "creation_timestamp": "2026-07-07T17:00:52.410471Z"}, {"uuid": "06848184-41f2-49af-a2d7-0fb5a5d8b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mq34hkw7uz2c", "content": "A 16-year-old flaw in #Linux KVM hypervisor dubbed \"#Januscape\" (CVE-2026-53359) is a Use-After-Free vulnerability which allows guest VMs to escape to the host:\n\nThe fix was merged into the mainline Linux kernel on June 19, 2026:\n\ud83d\udc47", "creation_timestamp": "2026-07-07T17:20:22.686440Z"}, {"uuid": "59fca4b4-500b-4351-a39d-d80a0bab022a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mq3fs4tl3b2f", "content": "A use-after-free vulnerability in Linux's KVM hypervisor, tracked as CVE-2026-53359 and named 'Januscape', allows guest VMs to escape to the host on Intel and AMD systems. Discovered by Hyunwoo Kim, the flaw has existed for 16 years and can lead to host code execution.", "creation_timestamp": "2026-07-07T20:07:20.535529Z"}, {"uuid": "ec451422-4923-4b99-91fe-e9fdaf2c8cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://threatintel.cc/2026/07/07/linux-kernel-vulnerability-allows-vm.html", "content": "Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek\n\nThe Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD host systems. This use-after-free flaw can be exploited by an attacker with guest root access to achieve full host compromise or cause a denial-of-service.", "creation_timestamp": "2026-07-08T01:00:54.120639Z"}, {"uuid": "afc31830-06c4-4f37-84c8-82129b0ac654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mq3zp2b35w2o", "content": "\ud83d\udcf0 If you self-host KVM/Proxmox with nested virtualization enabled, check for CVE-2026-53359 patches\n\nA Linux kernel vulnerability, CVE-2026-53359 (\"Januscape\"), affects KVM's shadow paging code w...\n\nhttps://tinyurl.com/2ybvt5yt #TechNews #CrustyTLDR", "creation_timestamp": "2026-07-08T02:03:31.669360Z"}, {"uuid": "ae24d342-82bd-4c99-817d-c5dfbf339ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq5hk3hyhg2c", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-08T15:43:57.810923Z"}, {"uuid": "e738157d-1bdf-49fa-9782-4bb092397066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mq56gexppq2d", "content": "Januscape CVE-2026-53359 KVM Vulnerability", "creation_timestamp": "2026-07-08T13:00:49.761364Z"}, {"uuid": "c414a300-0af1-4c39-be22-0d8b8128b52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq56qxxsyg2r", "content": "Januscape CVE-2026-53359 KVM\u306e\u8106\u5f31\u6027\n\n\u4eee\u60f3\u30de\u30b7\u30f3\u306f\u672c\u6765\u3001\u7269\u7406\u30db\u30b9\u30c8\u304b\u3089\u9694\u96e2\u3055\u308c\u305f\u72b6\u614b\u3092\u4fdd\u3064\u3088\u3046\u8a2d\u8a08\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3057\u304b\u3057\u3001Linux\u30ab\u30fc\u30cd\u30eb\u30d9\u30fc\u30b9\u306e\u4eee\u60f3\u30de\u30b7\u30f3(KVM)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u6b20\u9665\u306b\u3088\u308a\u3001\u30b2\u30b9\u30c8OS\u304c\u3053\u306e\u5883\u754c\u3092\u7a81\u7834\u3057\u3001\u30db\u30b9\u30c8\u30ab\u30fc\u30cd\u30eb\u3092\u4fb5\u5bb3\u3067\u304d\u308b\u3053\u3068\u304c\u5224\u660e\u3057\u307e\u3057\u305f\u3002Januscape\u8106\u5f31\u6027\u3068\u540d\u4ed8\u3051\u3089\u308c\u3001CVE-2026-53359...", "creation_timestamp": "2026-07-08T13:06:45.383461Z"}, {"uuid": "1e0f45d8-42a1-4ece-8e1b-24b08296951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-08T16:01:24.062589Z"}, {"uuid": "0259159e-be10-44fa-b97e-dfb3dcba2e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mq64nzj5ou2r", "content": "CVE-2026-53359 (Januscape) in KVM lets untrusted guest VMs on AMD/Intel break out to compromise or crash Linux hosts via guest-side use-after-free memory corruption.\n", "creation_timestamp": "2026-07-08T22:01:59.177100Z"}, {"uuid": "e2977ff3-fd00-4e6f-b5e6-9308220d3584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://www.acn.gov.it/portale/w/kvm-poc-pubblico-per-lo-sfruttamento-della-cve-2026-53359", "content": "Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-53359 \u2013 nota col nome di \u201cJanuscape\u201d - presente nella componente KVM del kernel Linux. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilit\u00e0 del servizio e, in determinate condizioni, elevare i propri privilegi ed eseguire codice arbitrario sui sitemi target.", "creation_timestamp": "2026-07-09T01:00:49.160584Z"}, {"uuid": "9dc3f41e-16a0-4f4a-9438-c4a12a6d3418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vulndex.at/post/3mq7cw73jss2u", "content": "Eine Schwachstelle kann bereits hohe Aufmerksamkeit erhalten, bevor ein CVSS-Score vergeben wurde.\n\nCVE-2026-53359 (Januscape) ist ein aktuelles Beispiel.\n\nDie kostenlose Trending-CVE-\u00dcbersicht von VulnDex zeigt solche Entwicklungen fr\u00fchzeitig.\n\n\ud83d\udc49 vulndex.at/intel/trendi...", "creation_timestamp": "2026-07-09T09:26:36.561853Z"}, {"uuid": "1572756d-d1cd-4cc0-bff1-8fb5715d7d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://gist.github.com/lexfrei/4e8e13137f97b60874350ef2ac512f6d", "content": "# Correctly fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\n## TL;DR\n\nThe config-based mitigation for CVE-2026-53359 that's often recommended \u2014 `machine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0]` \u2014 **is silently ignored on Talos nodes that boot via systemd-boot / UKI** (bare-metal UEFI is the common case). The kernel command line is baked into the signed UKI and cannot be changed by machine config; `grubUseUKICmdline` only affects GRUB.\n\nThe correct fix is to **upgrade to a Talos build whose kernel already contains the patch** \u2014 Linux **6.18.38**, shipped in **Talos v1.13.6** \u2014 which closes **both** CVEs at the kernel level. Then you don't need to disable nested virtualization at all.\n\n## The two CVEs and their fixed kernels\n\nBoth are KVM x86 shadow-paging use-after-free bugs enabling guest-to-host escape:\n\n| CVE | Fixed in the 6.18.x line |\n| --- | --- |\n| CVE-2026-46113 | 6.18.30 |\n| CVE-2026-53359 (Januscape) | 6.18.38 |\n\nStable kernels are cumulative, so **6.18.38 contains both fixes**. Mapping to Talos:\n\n- Talos **v1.13.5** \u2192 kernel 6.18.36 \u2192 fixes only 46113 (NOT 53359).\n- Talos **v1.13.6** \u2192 kernel 6.18.38 \u2192 fixes **both**.\n\nSo bump to **v1.13.6**, not v1.13.5.\n\n## Why the config mitigation fails on systemd-boot\n\nTalos docs, verbatim: *\"the `.machine.install.extraKernelArgs` field is ignored, as kernel arguments are embedded in the UKI and cannot be modified without upgrading the UKI.\"*\n\n- `kvm_intel`/`kvm_amd` are built into the Talos kernel, so `modprobe.d` does nothing and `/sys/module/kvm_intel/parameters/nested` is `0444` (read-only). `nested=` is settable only via the kernel command line.\n- On systemd-boot the cmdline lives inside the signed UKI, so `extraKernelArgs` are dropped \u2014 Talos even warns `extra kernel arguments are not supported when booting using SDBoot`.\n- `grubUseUKICmdline: false` only helps GRUB nodes. On a systemd-boot node, `talosctl upgrade` with these args leaves `/proc/cmdline` unchanged and nested stays on.\n\nSo on systemd-boot nodes, disabling nested via config is not possible \u2014 but you don't need to. Just run a fixed kernel.\n\n## The fix \u2014 upgrade to Talos v1.13.6\n\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), build a Talos Image Factory schematic and upgrade to it. Nothing here requires a custom-built image \u2014 Image Factory assembles the stock installer plus the official extensions declaratively.\n\n### 1. Create a schematic with your extensions\n\n```sh\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n```\n\nTrim the extension list to what your cluster actually uses.\n\n### 2. Upgrade node-by-node\n\n```sh\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n```\n\n`talosctl upgrade` re-runs the installer, rewrites the boot assets and reboots. Roll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Note: Talos only tests migrations between adjacent minors, so from an old release upgrade sequentially through each minor's latest patch (e.g. 1.10 \u2192 1.11 \u2192 1.12 \u2192 1.13) rather than jumping straight.\n\n### 3. Verify\n\n```sh\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n```\n\n`kvm_intel.nested` may stay `Y` \u2014 that is fine; the vulnerable code path is fixed in the kernel.\n\n## Ready example (Cozystack extension set)\n\nA schematic with the standard Cozystack extension set (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\n- Schematic ID: `be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5`\n- Installer: `factory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6`\n\n## References\n\n- CVE-2026-53359 (Januscape): https://nvd.nist.gov/vuln/detail/CVE-2026-53359\n- CVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n- Talos bootloader (GRUB vs systemd-boot, UKI cmdline): https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n- Talos Image Factory: https://factory.talos.dev\n", "creation_timestamp": "2026-07-09T12:33:33.641301Z"}, {"uuid": "00cd7084-b3bc-48df-902a-19bf6a1ebca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mq7xybfkwg2e", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-09T15:43:33.867882Z"}, {"uuid": "12ce5815-a5b9-4920-b548-78da0bc13115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqbpbqr7rw2w", "content": "COGNOSCERE Tech Brief \u2014 2026-07-10\n\nJanuscape, CVE-2026-53359, is a use-after-free bug in Linux KVM's shadow MMU dat\n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-10T08:13:06.924327Z"}, {"uuid": "9802b9e8-0f37-4686-825d-45d25554d56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/xceptn.bsky.social/post/3mqcb5tor3v2p", "content": "A recent KVM vulnerability fix - NVD - CVE-2026-53359 nvd.nist.gov/vuln/detail/... #Linux #FOSS #OpenSource #Technology #Security", "creation_timestamp": "2026-07-10T13:33:03.814105Z"}, {"uuid": "c3d8cdcc-303e-4d75-928d-63646e287994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vblog.io/post/3mqcihaubt422", "content": "A propos de la vuln\u00e9rabilit\u00e9 Januscape (CVE-2026-53359)\nhttps://vblog.io/a-propos-de-la-vulnerabilite-januscape-cve-2026-53359/", "creation_timestamp": "2026-07-10T15:43:34.756956Z"}, {"uuid": "91a32611-cbbc-45e7-b33e-a6aec65a9d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/116896957268026860", "content": "\ud83c\udd95 Vulnerability-Lookup now imports Microsoft CSAF VEX documents from MSRC \u2014 joining the Red Hat VEX feed as a vendor VEX enrichment source.\nPer-CVE VEX statements (product status, severity) are attached directly to CVE records, visible on the vulnerability page and via the API with the full CSAF documents.\nExample with both Red Hat and Microsoft VEX:https://vulnerability.circl.lu/vuln/CVE-2026-53359#vex\n#VEX #CSAF #VulnerabilityManagement #CVE #OpenSource", "creation_timestamp": "2026-07-10T17:53:34.162676Z"}, {"uuid": "fc5234d7-bf3a-4669-92e1-35f3404e6c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/billingsley.bsky.social/post/3mqe7qkiszr2q", "content": "COGNOSCERE Tech Brief \u2014 2026-07-11\n\nCVE-2026-53359, dubbed Januscape, is a use-after-free bug in Linux KVM's shadow \n\nhttps://www.cognoscerellc.com/news", "creation_timestamp": "2026-07-11T08:13:03.528627Z"}, {"uuid": "1e92ec6b-603f-4324-8a80-7557c49d7a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqfutrf5z72l", "content": "Introducing \"Januscape\" (CVE-2026-53359)  \n\nA Guest-to-Host Escape in KVM/x86 exploiting a UAF in the shadow MMU. Triggerable on both Intel and AMD hosts. Threatens x86 public clouds (GCP, AWS) that expose nested\u2026\n\n\ud83d\udd01 RT @v4bel | reposted by @HackingLZ\nhttps://x.com/v4bel/status/2074162435339207141", "creation_timestamp": "2026-07-12T00:03:18.822660Z"}, {"uuid": "b4696590-c066-4e4e-89d2-cbed3f87963f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mqh37nbd5j2w", "content": "A use-after-free bug in Linux KVM (CVE-2026-53359), dubbed Januscape, allows a guest VM to corrupt the host's shadow page state, risking host stability. Public proof-of-concept causes panics.", "creation_timestamp": "2026-07-12T11:29:59.413093Z"}, {"uuid": "8b64ab9c-baa1-4e1f-a86d-a14ceacb2309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-12T13:00:04.217576Z"}, {"uuid": "b85a6d93-1bcd-4756-8dae-4bf858266011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mqhzkzhzb32b", "content": "Introduction A local privilege escalation (LPE) vulnerability affecting the Linux kernel was publicly disclosed on July 6, 2026. The vulnerability was assigned CVE ID CVE-2026-53359 and i...\n\n\ud83d\udd17 https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-12T20:33:13.337012Z"}, {"uuid": "3d0e7842-6df0-42c6-b6eb-82d3c5a2e756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16571", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 \ud83d\udd25 A new 16-year-old Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-13T00:00:44.289333Z"}, {"uuid": "4a70e523-41ab-4598-a3c7-720056885de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mqjifxjg2c7u", "content": "Januscape vulnerability CVE-2026-53359 mitigations available | Ubuntu https://ubuntu.com//blog/januscape-linux-vulnerability-mitigations-available", "creation_timestamp": "2026-07-13T10:31:30.228658Z"}, {"uuid": "1ebbd6e0-5807-4242-ba60-f2ae899b26a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqjngi26od2u", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-48282, CVE-2026-50656, CVE-2026-55255, CVE-2026-20896, CVE-2026-53359\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-13T12:01:15.622705Z"}, {"uuid": "c431e30f-c856-465a-9382-30505b9be5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-13T13:00:05.336859Z"}, {"uuid": "2cf418f0-882e-4134-8836-3e4dcbf510e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.268007Z"}, {"uuid": "e212e407-3de1-4080-a644-c44eef83b4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:09.723971Z"}, {"uuid": "7d10f761-b0a5-442e-9a14-e5488b89c36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:06.171938Z"}, {"uuid": "e007c07a-d230-4706-9ebb-4f5b39d800b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:07.740346Z"}, {"uuid": "9062b181-7244-4109-bc24-9044b39f41cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.198430Z"}, {"uuid": "a767315b-aeec-4230-8ba1-387e4c917a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.646228Z"}, {"uuid": "9c9eff16-557f-46c9-a18b-be9c51f08c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:09.724033Z"}, {"uuid": "2bb650ab-5a17-40c7-b81b-c9d09dec93a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.046666Z"}, {"uuid": "cb037f50-3dc7-4333-a9d1-02ed730d1a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.319313Z"}, {"uuid": "a9845fa4-adf3-41e5-921d-074d810dd22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.729219Z"}, {"uuid": "b9eef9ab-ce5d-4b70-9d15-c40f42bc4b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8381", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-14T00:00:47.248043Z"}, {"uuid": "982c60ab-1650-4c7d-9698-f97fe9d75d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-14T01:00:04.664612Z"}, {"uuid": "199f5271-a6c3-41e8-bf03-608abe08f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.238476Z"}, {"uuid": "81b23dc4-0e05-4271-a2ef-b64297523058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92413", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359-Kernel-Fix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a chuzhongyun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 22:14:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nLinux \u5185\u6838\u5347\u7ea7\u6307\u5357 - \u4fee\u590d CVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.510051Z"}, {"uuid": "0d8e0edd-638a-4dbe-be93-2938b69c8f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92423", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 00:43:00\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.420800Z"}, {"uuid": "632f4b16-b91f-473f-87a9-7ced14d79faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92442", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Januscape-Hotfix\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Aoripus-LTD\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-08 03:58:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete fix collection for the CVE-2026-53359 guest-to-host escape vulnerability in the KVM/x86 shadow MMU. From zero-downtime livepatch to kernel upgrade \u2014 covers every operational scenario. / KVM/x86 shadow MMU \u865a\u62df\u673a\u9003\u9038\u6f0f\u6d1e\uff08CVE-2026-53359\uff09\u7684\u5b8c\u6574\u4fee\u590d\u65b9\u6848\u96c6\u5408\u3002 \u4ece\u96f6\u505c\u673a\u70ed\u4fee\u590d\u5230\u5185\u6838\u5347\u7ea7\uff0c\u8986\u76d6\u6240\u6709\u8fd0\u7ef4\u573a\u666f\u3002\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:32.675882Z"}, {"uuid": "aa01daad-9d3a-46a8-b16f-70209b4f0d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3293", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 rmap_remove() \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Kernel-based Virtual Machine (KVM) \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u0441\u0442\u0435\u043a\u0448\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-09298\nCVE-2026-53359\n\n\u0412 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c\u0441\u044f \"\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c LINUX\", \u0438\u0437\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0435\u0442\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0424\u0421\u0422\u042d\u041a \u0420\u043e\u0441\u0441\u0438\u0438, \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u043c 25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Linux:\nhttps://lore.kernel.org/linux-cve-announce/2026070403-CVE-2026-53359-4f57@gregkh/\nhttps://git.kernel.org/stable/c/1ae7d5a6db6c190ce183e3098ca0e0846e14d462\nhttps://git.kernel.org/stable/c/2ad3afa40ac6aa340dada122f9abfa46c0a6eb35\nhttps://git.kernel.org/stable/c/5e470998a23e4c3d89ed24e8172cb22747e61efa\nhttps://git.kernel.org/stable/c/81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb\nhttps://git.kernel.org/stable/c/9291654d69e08542de37755cebe4d5b02c3170d1\nhttps://git.kernel.org/stable/c/b1337aae5e194324e4810d561764e7793f8b3864\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Red Hat Inc.:\nhttps://access.redhat.com/security/cve/cve-2026-53359\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2026-53359", "creation_timestamp": "2026-07-15T00:00:35.330580Z"}, {"uuid": "db700f97-1dae-49d9-82d6-844b026a6492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92726", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a KVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 19:05:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.321877Z"}, {"uuid": "217f4b01-97e8-42ea-9266-42fa1d30c413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/92720", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #\u6f0f\u6d1e\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a LVM-Januscape\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xj2268-TA\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-09 18:49:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-53359\u6f0f\u6d1e\u8865\u4e01\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:36.391264Z"}, {"uuid": "268eb721-96fc-4cdb-b518-37e9d81ceac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-15T02:00:04.242266Z"}, {"uuid": "cff7b1ad-a4a5-4514-a7e6-8ce6800b4e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-15T12:00:03.946042Z"}, {"uuid": "63dbf4cc-bc93-4ab3-b1ec-0f7a7f1a064b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9423", "content": "\ud83d\udd25 A new 16-year-old #Linux KVM flaw lets a rooted nested VM crash the x86 host and take down other tenants on the same machine.\n\nDubbed \"Januscape\" (CVE-2026-53359), the bug sits in KVM\u2019s shadow MMU.\n\nResearcher says a full guest-to-host escape exploit also exists in a controlled setup; only the host-crash PoC is public.\n\nExplained here: https://thehackernews.com/2026/07/16-year-old-linux-kvm-flaw-lets-guest.html", "creation_timestamp": "2026-07-16T00:00:19.694654Z"}, {"uuid": "122d0f3b-f650-467f-9002-8507aad6d9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/sysodmins/29363", "content": "\ud83d\udd25 \u0410\u0445\u0442\u0443\u043d\u0433! \u0412 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432\u044b\u0432\u0430\u043b\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359) \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 Linux KVM. \n\n\u0415\u0441\u043b\u0438 \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0435\u0441\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043a\u0438 (\u0430 \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043a\u0443\u043f\u0430\u0442\u0435\u043b\u044c VPS \u0437\u0430 100 \u0440\u0443\u0431\u043b\u0435\u0439 \u0438\u0445 \u0438\u043c\u0435\u0435\u0442), \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0431\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e, \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 x86 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u043e\u0441\u0435\u0434\u044f\u043c\u0438 \u043f\u043e \u0436\u0435\u043b\u0435\u0437\u0443. Canonical \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0442\u0443\u0435\u0442 \u043a\u043e\u0441\u0442\u044b\u043b\u044c... \u0432\u044b\u0440\u0443\u0431\u0438\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e (nested virtualization).\n\n\u0415\u0449\u0435 \u0438\u0437 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u043e, \u0447\u0442\u043e \u0431\u0430\u0433 \u043b\u0435\u0436\u0430\u043b \u0432 KVM 16 \u043b\u0435\u0442.\n\n\u0415\u0449\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u0433\u0443\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0435\u043d\u0434\u0430\u0440\u043d\u044b\u0439 email \u0438\u0437 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 2007 \u0433\u043e\u0434\u0430. \u041f\u0438\u0448\u0435\u0442 \u0422\u0435\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (\u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c OpenBSD), \u043e\u0442\u0432\u0435\u0447\u0430\u044f \u044e\u0437\u0435\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u0430 \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \ud83c\udfe5\n\n\u041f\u0435\u0440\u0435\u0432\u043e\u0434 \u044d\u0442\u043e\u0439 \u0431\u0430\u0437\u044b:\n> \u0412\u044b, \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c, \u043a\u0443\u0440\u0438\u0442\u0435 \u0447\u0442\u043e-\u0442\u043e \u0437\u0430\u0431\u043e\u0440\u0438\u0441\u0442\u043e\u0435. \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 x86 - \u044d\u0442\u043e \u043a\u043e\u0433\u0434\u0430 \u0432\u044b \u0431\u0435\u0440\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u0446\u0435\u043b\u043e\u0435 \u044f\u0434\u0440\u043e, \u043f\u043e\u043b\u043d\u043e\u0435 \u043d\u043e\u0432\u044b\u0445 \u0431\u0430\u0433\u043e\u0432, \u0438 \u043a\u043b\u0430\u0434\u0435\u0442\u0435 \u0435\u0433\u043e \u043f\u043e\u0432\u0435\u0440\u0445 \u043c\u0435\u0440\u0437\u043a\u043e\u0439 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b x86, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0437\u0430\u0449\u0438\u0442\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u0430\u043c\u044f\u0442\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0440\u0438\u0432\u043e. \u0410 \u043f\u043e\u0442\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0435 \u0441\u0432\u043e\u044e \u041e\u0421 \u043f\u043e\u0432\u0435\u0440\u0445 \u044d\u0442\u043e\u0439 \u043d\u043e\u0432\u043e\u0439 \u043a\u0443\u0447\u0438 \u0434\u0435\u0440\u044c\u043c\u0430 \ud83d\udc68\u200d\ud83e\uddb3\n> \n> \u0412\u044b \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e \u043e\u0442\u043e\u0440\u0432\u0430\u043d\u044b \u043e\u0442 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 (\u0435\u0441\u043b\u0438 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0443\u043f\u044b), \u0435\u0441\u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u0443\u044e \u041e\u0421 \u0438\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0431\u0435\u0437 \u0434\u044b\u0440 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0443\u0442 \u0438 \u043d\u0430\u043f\u0438\u0448\u0443\u0442 \u0441\u043b\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0434\u044b\u0440 \ud83d\ude02\n> \n> \u0412\u044b \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u0432\u0438\u0434\u0435\u043b\u0438 \u043d\u0430 \u043f\u043e\u043b\u043a\u0435 \u043a\u043e\u0440\u043e\u0431\u043a\u0443, \u043e\u043d\u0430 \u043f\u0435\u0440\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u043c\u0438 \u0446\u0432\u0435\u0442\u0430\u043c\u0438, \u0438 \u0432\u044b \u0435\u0435 \u043a\u0443\u043f\u0438\u043b\u0438. \u0412\u043e\u0442 \u0438 \u0432\u0441\u044f \u0432\u0430\u0448\u0430 x86 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \ud83d\ude0e\n\n\u0421\u043f\u0443\u0441\u0442\u044f \u043f\u043e\u0447\u0442\u0438 20 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u043f\u0440\u043e\u0440\u043e\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0443\u0440\u043e\u0432\u043e\u0433\u043e \u0431\u043e\u0440\u043e\u0434\u0430\u0442\u043e\u0433\u043e \u0434\u0435\u0434\u0430 - \u0441\u0431\u044b\u043b\u043e\u0441\u044c.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-07-16T00:00:20.675744Z"}, {"uuid": "97726b66-ff05-43bc-bb18-f6ce4efea19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/sagalinked.bsky.social/post/3mqqjybbg2g2a", "content": "\ud83d\udcf0 Januscape, an open-source tool for guest-to-host escape attacks in KVM/x86 systems, has been identified as vulnerable to a critical security flaw (CVE-2026-53359), potentially allowing attackers to gain unauthorized access to host machines.\n\n\ud83d\udd17 https://github.com/V4bel/Januscape\n\n#Tech #Dev", "creation_timestamp": "2026-07-16T05:48:16.478294Z"}, {"uuid": "9a958355-7c38-4ff1-9895-fe28cf0906a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93551", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a almalinux-januscape-mitigation\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x024n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:47:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPanduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:04.448996Z"}, {"uuid": "531523d7-9a3d-4bee-9e42-588dd6dd2652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/93525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ndouglas-cloudsmith\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 11:46:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:05.783569Z"}, {"uuid": "b465f0ed-f6e4-49b2-ac45-8f49281e32a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-16T19:00:05.773781Z"}, {"uuid": "b51191c2-b8c1-4ed5-a221-265cf4691a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-16T19:00:06.187024Z"}, {"uuid": "4ae109dc-a0d2-4bc5-baf9-3be2f5dce6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "content": "", "creation_timestamp": "2026-07-16T19:00:06.411397Z"}, {"uuid": "59c2891e-08ec-43e4-8e9d-3bb8ee11850d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-16T19:00:17.466220Z"}, {"uuid": "f3f489f1-6052-45a2-960a-3268f9bbd826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-16T19:00:18.914534Z"}, {"uuid": "2c58e3e3-85d8-4721-ae1b-46e5cdd984e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-16T19:00:18.486026Z"}, {"uuid": "33f5ae63-ce23-46fb-b665-d00d43b90407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-16T19:00:20.091878Z"}, {"uuid": "37641031-d61a-4dd9-946a-369af3c0b169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-16T19:00:15.233093Z"}, {"uuid": "f19bd553-1f7f-47bf-bf16-572f3333fa3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-16T19:00:18.616578Z"}, {"uuid": "d799dd98-e604-416f-bca0-ff51ce34058e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/6kr7hIoL88BrLchA92ncvvrRqf7Y35-wLyAsUuKqT9ornHo", "content": "", "creation_timestamp": "2026-07-17T00:00:25.196981Z"}, {"uuid": "e1cce2ef-2c36-4019-8ff1-c74c3a839d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/HNPB5oa1yFVH3WekiUbQvvfAzLOwUwiNbJgQ6qW_ApvUQ1Y", "content": "", "creation_timestamp": "2026-07-17T00:00:25.687186Z"}, {"uuid": "e25701f8-280d-4b35-8a77-bb94df1b023d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-17T00:00:35.964032Z"}, {"uuid": "37144287-cb0d-4033-9ce4-4f1bab486ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-17T00:00:36.447461Z"}, {"uuid": "50766dd6-3c2e-4837-872d-a514b3c84e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/1oKidIvEiBLg9fq2L9jcRpMHsDemNPCrRVVFGdn6IjHF34I", "content": "", "creation_timestamp": "2026-07-17T00:00:11.611881Z"}, {"uuid": "8a59f0e3-ac1b-497d-9771-b0a867f5bcef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-17T00:00:30.665732Z"}, {"uuid": "45b9b0e9-44b5-4d97-923a-b130204c3066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-17T00:00:34.242118Z"}, {"uuid": "ace96b04-0aa7-4505-bb3d-b47449861db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-17T00:00:33.116090Z"}, {"uuid": "500344d0-79f4-40bb-a6b8-75bd4bb39228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-17T00:00:35.645843Z"}, {"uuid": "8126b07a-731f-4732-998f-e033d6ba91cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/GithubRedTeam/93525", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-53359\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ndouglas-cloudsmith\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 11:46:45\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Intel and AMD alike. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.408009Z"}, {"uuid": "e0759885-2c20-4478-b36d-b32624255d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93551", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a almalinux-januscape-mitigation\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a x024n\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Shell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-15 14:47:39\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPanduan mitigasi Januscape (CVE-2026-53359) AlmaLinux 9.5 production-safe + scripts\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:54.606425Z"}, {"uuid": "1ea9b0c2-e1bc-4655-a12e-43ac50980717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/gihyo.jp/post/3mqsmngsn6d2w", "content": "Ubuntu Weekly Topics\u300cUbuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u2060\u2060\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56\u300d\u516c\u958b #ubuntujp gihyo.jp/admin/clip/0...", "creation_timestamp": "2026-07-17T01:41:13.573952Z"}, {"uuid": "abc9e171-e336-4829-8bd8-747d6d4f4f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/feedbot.unronritaro.net/post/3mqsrthudkh2l", "content": "Ubuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56 | gihyo.jp", "creation_timestamp": "2026-07-17T03:14:04.535499Z"}, {"uuid": "98b391d8-109e-4ef3-861e-eb5258304e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/quasagroup.bsky.social/post/3mqt7f5pzok2q", "content": "Januscape CVE-2026-53359: KVM Vulnerability Patches and Mitigations\nquasa.io/media/janusc...\nJanuscape (CVE-2026-53359) is a use-after-free vulnerability in the Linux kernel's KVM/x86 shadow MMU that affects nested virtualization on Intel and AMD x86_64 systems.", "creation_timestamp": "2026-07-17T07:16:41.335904Z"}, {"uuid": "f80b89cd-7638-47b2-9037-ba9a6c3a2a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/nilab.bsky.social/post/3mqte6y4d622o", "content": "\u300c\u201c\u2060linux-vmware\u2060\u201d\u3068\u3044\u3046\u30d5\u30ec\u30fc\u30d0\u30fc\u306e\u30ab\u30fc\u30cd\u30eb\u304c\u5b9a\u671f\u7684\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u304a\u305d\u3089\u304fVMware\u74b0\u5883\u5411\u3051\u306e\u5c02\u7528\u30ab\u30fc\u30cd\u30eb\u3068\u601d\u308f\u308c\u307e\u3059\u304c\u3001\u6b63\u5f0f\u306a\u30ea\u30ea\u30fc\u30b9\u3084\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306f\u307e\u3060\u5b58\u5728\u3057\u3066\u3044\u307e\u305b\u3093\u300d\n\nUbuntu 26.10\uff08Stonking\uff09\u306e\u958b\u767a; ubuntu-lint\u3001\u201cJanuscape\u201d\uff08CVE-2026-53359\uff09\u8106\u5f31\u6027\u306e\u7de9\u548c\u7b56 | gihyo jp gihyo.jp/admin/clip/0...", "creation_timestamp": "2026-07-17T08:42:39.135172Z"}, {"uuid": "5d2a7205-e214-4658-9c23-98bfffc6fa7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/S_E_Reborn/6467", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-17T12:00:05.837922Z"}, {"uuid": "f595ddd2-95bf-4b88-9020-c5c8c5b39b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/L-_M2quNxYH_06kqEhZohkkABq2e2xU3hrq6peyuGhFV3NM", "content": "", "creation_timestamp": "2026-07-18T00:00:24.666721Z"}, {"uuid": "6a4f4637-bad2-47a4-8b0a-5627615cc911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/EFx4RsexlWv61d9rwav-xl624zn9x2O5XL6NkbX4_J_ixb4", "content": "", "creation_timestamp": "2026-07-18T00:00:23.988861Z"}, {"uuid": "06e5356a-dd97-4756-991e-e29f72ba876e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/MYczrieigu1A3MhWknQzdl_ZFhSKZitH7RdEW45J-iqySiE", "content": "", "creation_timestamp": "2026-07-18T00:00:25.047672Z"}, {"uuid": "ea279dce-eb44-4c44-b5c6-63b93959d6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/S_E_Reborn/6467", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c \u043c\u0430\u0448\u0438\u043d\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel \u0438 AMD.\n\nJanuscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53359 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 Januscape. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u0434 \u0442\u0435\u043d\u0435\u0432\u043e\u0433\u043e MMU \u0432 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux (KVM).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0434\u0443 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u043a\u043e\u0432 x86, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043a\u0430\u043a \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430\u0445 Intel, \u0442\u0430\u043a \u0438 \u043d\u0430 AMD. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0435\u0451 \u043a\u0430\u043a 0-day \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Google kvmCTF.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 \u00ab\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f Januscape \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0439 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u044f\u0434\u0440\u0430 \u0445\u043e\u0441\u0442\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0432\u0435\u0441\u0442\u0438 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 (DoS-\u0430\u0442\u0430\u043a\u0430), \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u043e\u043c \u0438 \u0432\u0441\u0435\u043c\u0438 \u0435\u0433\u043e \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435).\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Red Hat Enterprise Linux (RHEL), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Januscape \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0431\u043b\u0430\u043a\u0435.\n\n\u0415\u0441\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f root \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a Dirty Frag, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u041a\u0438\u043c.\n\nCVE-2026-53359 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 16 \u043b\u0435\u0442. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0442\u043a\u0435 19 \u0438\u044e\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d \u043a\u043e\u043c\u043c\u0438\u0442 81ccda30b4e8.", "creation_timestamp": "2026-07-18T00:00:32.213272Z"}, {"uuid": "e97a731c-cba6-41c8-b15f-48874e8300b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/MCIVjT2wGlOhNzGxxI4_zyvBHRQPD_Tsyc6A30C1dkLHGvM", "content": "", "creation_timestamp": "2026-07-18T00:00:33.356304Z"}, {"uuid": "99bfa379-ff99-4e9c-9e9b-9a673b0bb12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/QKon8ALdayI3TrgWGw4-0pv35mdNAYiB_OEF40OlB_Dw96c", "content": "", "creation_timestamp": "2026-07-18T00:00:42.231701Z"}, {"uuid": "d3f1c5b4-3f94-4e82-9bea-5b53e9e50266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/Rc0b9T17FJVJElH6QZhazeHK_5sevkoWVsl-YVplQMonaEk", "content": "", "creation_timestamp": "2026-07-18T01:00:10.858941Z"}, {"uuid": "77756258-4ec6-4871-a5a3-d44ddbbb278a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/lpjVqn-gGFFXmyIQryBtHjN9Rm2dNH7ag2qkpq69veYk7w", "content": "", "creation_timestamp": "2026-07-18T13:00:04.124236Z"}, {"uuid": "7c4733b1-1cbf-4776-9728-3ef428ddea79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mqwtqrk6d22z", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\nHyunwoo Kim published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected.\n\ngithub.com/V4bel/Janusc...", "creation_timestamp": "2026-07-18T17:59:19.017938Z"}, {"uuid": "6fec439e-9e1d-4388-b261-867b4ff44b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mqwtqva3r22z", "content": "Januscape: Guest-to-Host Escape in KVM/x86\n\nHyunwoo Kim published an article about a use-after-free vulnerability in the shadow MMU emulation of KVM/x86 (CVE-2026-53359). Both Intel (VMX) and AMD (SVM) code is affected.\n\ngithub.com/V4bel/Janusc...", "creation_timestamp": "2026-07-18T17:59:19.455855Z"}, {"uuid": "8f969e29-6172-4898-a40f-4bb5f84bb8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/lpjVqn-gGFFXmyIQryBtHjN9Rm2dNH7ag2qkpq69veYk7w", "content": "", "creation_timestamp": "2026-07-19T00:00:27.859636Z"}, {"uuid": "935a1b01-66c3-4e7c-9b7a-915482d57790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53359", "type": "seen", "source": "https://bsky.app/profile/edwing.mstdn.moimeme.ca/post/3mr35w2x56xa2", "content": "Turns out, OVH had to patch all their hypervisors because of a vulnerability in KVM. This did lead to service disruptions to their customers.\n\nhttps://blog.ovhcloud.com/cve-2026-53359-januscape-patching-campaign-lessons-learned-from-remediating-a-kvm-flaw-across-tens-of-thousands-of-machines/\n- [\u2026]", "creation_timestamp": "2026-07-20T11:13:08.576312Z"}, {"uuid": "0b6fee8f-f110-4b19-9cfa-215c8db72e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-20T18:00:13.193437Z"}, {"uuid": "694e25a2-cb9a-4361-9b17-af16f797e81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-21T00:00:36.050126Z"}, {"uuid": "7e72953e-b365-4ccc-9f68-0bd8a6769e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr5f5zyblq2w", "content": "OVH patched CVE-2026-53359, a critical KVM flaw, across tens of thousands of hosts in under 10 days without warning most clients first.\n\n#OVHcloud #CVE202653359 #KVM #LinuxKernel #CloudSecurity", "creation_timestamp": "2026-07-21T08:26:37.688825Z"}, {"uuid": "774f6836-9ca6-4bd3-a7b2-aa570f647e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/w88_JA_gQvKlIS1J_4oBmOAFdoduZjdWNxY21QnJAdfIJUY", "content": "", "creation_timestamp": "2026-08-26T20:00:03.901115Z"}, {"uuid": "a9023f80-fa4f-4cd3-b659-63c9ac5c2688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-22T01:00:04.225410Z"}, {"uuid": "c53491f8-189c-4a61-b7f9-60afccd147cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "Telegram/w88_JA_gQvKlIS1J_4oBmOAFdoduZjdWNxY21QnJAdfIJUY", "content": "", "creation_timestamp": "2026-08-27T00:00:08.126057Z"}, {"uuid": "10d08ff3-1e56-4710-bb76-34b030a6f1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhbbzjc72d", "content": "\ud83d\udd17 CVE : CVE-2025-23131, CVE-2026-23272, CVE-2026-23278, CVE-2026-23302, CVE-2026-31451, CVE-2026-46252, CVE-2026-52928, CVE-2026-53138, CVE-2026-53139, CVE-2026-53157, CVE-2026-53158, CVE-2026-53163, CVE-2026-53167, CVE-2026-53325, CVE-2026-53327, CVE-2026-53359, CVE-2026-53362, CVE-2026-53366", "creation_timestamp": "2026-07-24T13:25:32.115200Z"}, {"uuid": "8eacd398-291d-48be-b9bc-57cfdd275b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ZerodayAlert/751", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.932571Z"}, {"uuid": "22274c43-8ccd-4044-a307-2c1efb9898e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ZerodayAlert/751", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.709444Z"}, {"uuid": "b46f2880-50b2-4f6d-bb2e-59cded91241d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/cyberwarehouse/1158", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T07:00:05.450319Z"}, {"uuid": "a71ad500-537d-49ea-a14e-3b66d6e673c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/cyberwarehouse/1158", "content": "Linux KVM 16 \u043b\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043e\u0431\u0440\u0443\u0448\u0438\u0442\u044c \u0432\u0435\u0441\u044c \u0441\u0435\u0440\u0432\u0435\u0440\n\nKVM \u0434\u043e\u043b\u0436\u0435\u043d \u0436\u0451\u0441\u0442\u043a\u043e \u043e\u0442\u0434\u0435\u043b\u044f\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0442 \u0445\u043e\u0441\u0442\u0430, \u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53359 \u043b\u043e\u043c\u0430\u043b\u0430 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. Root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u0432\u0430\u0442\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0438\u043a\u0443 \u044f\u0434\u0440\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u043d\u0451\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430. \u0413\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0441\u0432\u0435\u0440\u044f\u043b \u0430\u0434\u0440\u0435\u0441 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043d\u043e \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b, \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430, \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u043a\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0430 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0441 root-\u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0445\u043e\u0441\u0442\u0443.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435: \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u0440\u0430\u0432\u0430 root \u0432\u043d\u0443\u0442\u0440\u0438 \u0433\u043e\u0441\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u0435\u0439. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u044f\u0434\u0440\u043e \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u0443\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0438 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u044f\u0434\u0440\u0430: 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211 \u0438 5.10.260.\n\n#KVM #Januscape #DoS #Linux\n\n@ZerodayAlert", "creation_timestamp": "2026-07-27T00:00:34.991998Z"}, {"uuid": "10ca8397-fbc0-4dd0-a256-912efc3db9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/x-n0ylXESV0VMQn7dfRNSBcrcNynpmfUXh9w9EUT5ZseMLA", "content": "", "creation_timestamp": "2026-07-29T12:00:04.300550Z"}, {"uuid": "9f7446d7-16d2-4dc6-8f55-298026047964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/427", "content": "\ud83d\udc7bThird CVE this week, but good news: Cozystack isn't exposed by design and the fix is the same v1.13.6 upgrade you already know. Details below\ud83d\udc47\n\nSecurity Advisory: CVE-2026-43499 (\"GhostLock\") \u2014 Cozystack Exposure Assessment\nOn July 7, 2026, a critical Linux kernel local privilege escalation \u2014 CVE-2026-43499 (\"GhostLock\") \u2014 was disclosed with a working proof-of-concept. It is a stack use-after-free in the kernel real-time mutex (rtmutex) priority-inheritance path, reachable from futex(2): on the proxy-lock rollback taken from futex_requeue(), remove_waiter() clears pi_blocked_on on the wrong task, leaving a dangling pointer to a freed kernel stack frame. Introduced in Linux 2.6.39 (2011), it affects every kernel up to v7.1-rc1, needs only CONFIG_FUTEX_PI=y (no capabilities, no user namespaces), and can be escalated into a container escape \u2014 an unprivileged local process reaching root on the host kernel.\n\nThe upstream fix is commit 3bfdc63936dd, shipped in stable kernels 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4.\n\nReference: https://nvd.nist.gov/vuln/detail/CVE-2026-43499\n\nConfirmed not affected\nGhostLock is a local escalation: it presupposes the attacker can already run native code on the host kernel's syscall surface. By design, Cozystack gives tenants no way to do that.\n\nManaged Kubernetes and VirtualMachine services. All tenant workloads execute inside guest virtual machines running on top of unprivileged containers. Tenant code has no direct access to the host kernel syscall surface \u2014 a futex sequence issued inside a guest reaches the guest kernel, not the host.\n\nManaged databases run as non-root, non-superuser users, with no Kubernetes API access and no ability to execute arbitrary code in the server process, so a tenant cannot issue the syscall sequence the exploit requires.\n\nNo arbitrary tenant code on the management cluster. Cozystack exposes only the managed services we provide \u2014 there is no surface on which a tenant runs arbitrary native code in a container on a management node.\nBy the design of Cozystack, we currently do not see any viable attack path that would allow a tenant to reach the host kernel surface affected by this vulnerability.\n\nRecommended action \u2014 same as Januscape: upgrade the kernel\nThe vulnerability is confirmed in current Talos Linux releases, and any future regression in the isolation above could re-expose it \u2014 so we recommend applying the kernel fix regardless.\n\nGhostLock is fixed in Talos Linux v1.13.6 (kernel 6.18.38-talos, newer than the first fixed 6.18.27). This is the same upgrade we recommended for CVE-2026-53359 (\"Januscape\") and CVE-2026-46113 \u2014 one move to v1.13.6 closes all three.\n\nAlready upgraded to v1.13.6 for Januscape? You are protected \u2014 no further action needed.\nNot yet? Follow the same runbook: build an Image Factory installer with your extensions, upgrade node-by-node to v1.13.6, and verify talosctl read /proc/sys/kernel/osrelease shows 6.18.38-talos. Move one node at a time, waiting for etcd quorum and storage health between control-plane nodes.\nIf you cannot upgrade immediately, kernel.randomize_kstack_offset=1 (via machine.sysctls) reduces the exploit's reliability as a defense-in-depth measure \u2014 not a substitute for the fix.\n\nWe will update this advisory as fixed releases and further mitigations are confirmed.", "creation_timestamp": "2026-07-29T12:00:04.361628Z"}, {"uuid": "cff6eae5-944b-4847-83e3-e85173a30853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/426", "content": "\ud83d\udc8a Fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\nContext\nCVE-2026-53359 (Januscape) and CVE-2026-46113 are KVM x86 shadow-paging use-after-free bugs that let a guest VM escape to the host. Both are fixed in Linux 6.18.38, which ships in Talos v1.13.6. Upgrading to it closes both at the kernel level \u2014 you do not need to disable nested virtualization.\n\nThe commonly suggested config mitigation:\nmachine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0] \u2014 is silently ignored on systemd-boot / UKI nodes (the usual bare-metal UEFI case):\n\nkvm_intel/kvm_amd are built into the Talos kernel, so modprobe.d and runtime /sys writes don\u2019t apply (/sys/module/kvm_intel/parameters/nested is 0444); nested= is settable only via the kernel command line.\nOn systemd-boot the cmdline is baked into the signed UKI, so extraKernelArgs are dropped (Talos warns extra kernel arguments are not supported when booting using SDBoot). grubUseUKICmdline: false only helps GRUB nodes.\n\nSo the fix is a kernel bump, not a config knob.\n\nRunbook\n\n1. Build an Image Factory schematic with your extensions\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), declare them \u2014 Image Factory assembles the stock installer plus the official extensions, no custom image build required.\n\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n\nTrim the extension list to what your cluster actually uses.\n\n2. Upgrade node-by-node\n\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n\nRoll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Talos only tests migrations between adjacent minors \u2014 from an old release, upgrade sequentially through each minor\u2019s latest patch rather than jumping straight.\n\n3. Verify\n\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n\nkvm_intel.nested may stay Y \u2014 that\u2019s expected; the vulnerable path is fixed in the kernel.\n\nReady installer (Cozystack extension set)\n\nStandard Cozystack extensions (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\nfactory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6\n\nReferences:\n\nCVE-2026-53359 (Januscape): \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53359\nCVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n\nTalos bootloader / UKI cmdline: https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n\nTalos Image Factory: https://factory.talos.dev", "creation_timestamp": "2026-07-29T12:00:04.471177Z"}, {"uuid": "9c053dbf-22b5-44e1-94f8-8aa11777f0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/420", "content": "\ud83d\udea8\u00a0Security Advisory \u2014 CVE-2026-53359\u00a0(\"Januscape\"): KVM guest-to-host escape\n\n\u00b7 Severity:\u00a0High\n\u00b7 Status:\u00a0Mitigation required now\n\nWhat happened\n\nOn 2026-07-06 a Linux kernel vulnerability, CVE-2026-53359\u00a0(\"Januscape\"), was publicly disclosed together with a working exploit. It is a use-after-free in the KVM/x86 shadow MMU that lets a guest VM break out to its host (the cluster node) or crash the node's kernel. It affects both Intel and AMD CPUs and has been latent in the kernel since 2010.\n\nThe upstream fix shipped in stable kernels (6.18.38, 6.12.95, 6.6.144, 6.1.177, 7.1.3) on 2026-07-04, but Talos Linux has not yet released an image with the fixed kernel. Every current Talos version still runs a vulnerable kernel.\n\nWho is affected\n\nCozystack installations that run virtualization or tenant Kubernetes clusters \u2014 tenant Kubernetes nodes are KubeVirt VMs, so they count. If you run only containerized workloads and never create VMs or tenant clusters, your exposure is much lower.\n\nThe risk\n\nThe exploit needs two things a tenant already has: root inside their own VM, and nested virtualization exposed to the guest (on by default). A malicious tenant could then:\n\n\u00b7 crash the node kernel, taking down every co-tenant VM on that node (denial of service), or\n\n\u00b7 with a working exploit, run code on the node and compromise the cluster.\n\nKubeVirt's sandboxing (unprivileged containers, seccomp, SELinux) does not stop this \u2014 the bug is in the host kernel and is reached through the normal KVM interface every VM must use.\n\nRecommended mitigation: disable nested virtualization\n\nCozystack VMs do not need nested virtualization. Disabling it removes the attack surface entirely, regardless of kernel version.\n\nTalos (most clusters)\n\nAdd to your Talos machine config, under machine.install:\n\n  install:\n    # Talos >= 1.12 only: pin grubUseUKICmdline false so the args are applied\n    # (otherwise they are silently ignored on UEFI/UKI systems).\n    grubUseUKICmdline: false\n    extraKernelArgs:\n    - kvm_intel.nested=0\n    - kvm_amd.nested=0\n\nBoth lines are safe on Intel and AMD \u2014 the one that does not match your CPU is ignored. On Talos older than 1.12 the grubUseUKICmdline field does not exist and extraKernelArgs is ignored on UEFI/UKI nodes; there the args must be baked into the boot image via Image Factory.\n\nApply it in two steps \u2014 talm apply, then\u00a0talm upgrade. First push the updated machine config to the node, then re-run the Talos installer so the kernel arguments are written into the boot configuration (a plain talm apply\u00a0alone does not rewrite the boot config). You can upgrade to the same Talos version you are already on \u2014 the point is to re-run the installer with the new arguments:\n\n# 1. Push the updated machine config to the node\ntalm apply -f nodes/.yaml\n\n# 2. Re-run the installer so the kernel args land in the boot config (this reboots the node)\ntalm upgrade -f nodes/.yaml\n\u26a0\ufe0f\u00a0This reboots the node.\u00a0Roll it out one node at a time, waiting for each node to become Ready\u00a0(and for etcd quorum to recover on control-plane nodes) before moving to the next.\n\nGeneric Linux hosts (non-Talos)\n\nCreate /etc/modprobe.d/cozystack-kvm-nested.conf:\n\nundefined\noptions kvm_intel nested=0\noptions kvm_amd nested=0\nThen reboot the node (or reload the\u00a0kvm\u00a0module) for it to take effect.\n\nAutomation\n\nWe have updated our Cozystack Claude Code skills to prescribe and verify this mitigation during bootstrap and upgrades, so the setting is placed under machine.install and persists across future Talos upgrades:\n\n\u2192 https://github.com/cozystack/ccp/pull/17\n\nYou can use the\u00a0cozystack:talos-bootstrap\u00a0and cozystack:cluster-upgrade\u00a0skills to apply and verify the change automatically.\n\nAfter a fixed Talos ships\nOnce Talos releases an image with the patched kernel (6.18.38 or newer), upgrade normally. You may keep nested virtualization disabled as a hardening measure, or re-enable it (remove the two arguments) if a specific workload requires it. We will notify you when a fixed Talos release is available.", "creation_timestamp": "2026-07-29T12:00:04.537631Z"}, {"uuid": "e4b6e207-f5bb-4254-ba30-35c5b598311b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/425", "content": "\ud83d\udee0 Update on CVE-2026-53359 (\"Januscape\"): the proper fix is here\n\nHi everyone. Our earlier mitigation was a hotfix, a temporary and forced measure. The proper fix is now available, so the hotfix is no longer needed.\n\nTL;DR: Disabling nested virtualization is no longer needed. It was a hotfix, and for some setups it wasn't even possible. The real fix is a kernel bump.\n\nIf you already applied it, roll it back and upgrade instead.\n\nGeneric Linux: make sure you're on Linux 6.18.38 or newer (with the fixes).\nSafe kernel versions across all branches:\n6.1.177 \u00b7 6.6.144 \u00b7 6.12.95 \u00b7 6.18.38 \u00b7 7.1.3 \u00b7 7.2-rc1\n\nFor Talos, follow the runbook below\ud83d\udc47", "creation_timestamp": "2026-07-29T12:00:04.571547Z"}, {"uuid": "d28ce862-f002-4198-bd16-dcf1f1d983cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-07-29T12:01:46.787935Z"}, {"uuid": "fcd5fcc2-3d3f-4c01-ae42-dc477b014fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/aenix_io/420", "content": "\ud83d\udea8\u00a0Security Advisory \u2014 CVE-2026-53359\u00a0(\"Januscape\"): KVM guest-to-host escape\n\n\u00b7 Severity:\u00a0High\n\u00b7 Status:\u00a0Mitigation required now\n\nWhat happened\n\nOn 2026-07-06 a Linux kernel vulnerability, CVE-2026-53359\u00a0(\"Januscape\"), was publicly disclosed together with a working exploit. It is a use-after-free in the KVM/x86 shadow MMU that lets a guest VM break out to its host (the cluster node) or crash the node's kernel. It affects both Intel and AMD CPUs and has been latent in the kernel since 2010.\n\nThe upstream fix shipped in stable kernels (6.18.38, 6.12.95, 6.6.144, 6.1.177, 7.1.3) on 2026-07-04, but Talos Linux has not yet released an image with the fixed kernel. Every current Talos version still runs a vulnerable kernel.\n\nWho is affected\n\nCozystack installations that run virtualization or tenant Kubernetes clusters \u2014 tenant Kubernetes nodes are KubeVirt VMs, so they count. If you run only containerized workloads and never create VMs or tenant clusters, your exposure is much lower.\n\nThe risk\n\nThe exploit needs two things a tenant already has: root inside their own VM, and nested virtualization exposed to the guest (on by default). A malicious tenant could then:\n\n\u00b7 crash the node kernel, taking down every co-tenant VM on that node (denial of service), or\n\n\u00b7 with a working exploit, run code on the node and compromise the cluster.\n\nKubeVirt's sandboxing (unprivileged containers, seccomp, SELinux) does not stop this \u2014 the bug is in the host kernel and is reached through the normal KVM interface every VM must use.\n\nRecommended mitigation: disable nested virtualization\n\nCozystack VMs do not need nested virtualization. Disabling it removes the attack surface entirely, regardless of kernel version.\n\nTalos (most clusters)\n\nAdd to your Talos machine config, under machine.install:\n\n  install:\n    # Talos >= 1.12 only: pin grubUseUKICmdline false so the args are applied\n    # (otherwise they are silently ignored on UEFI/UKI systems).\n    grubUseUKICmdline: false\n    extraKernelArgs:\n    - kvm_intel.nested=0\n    - kvm_amd.nested=0\n\nBoth lines are safe on Intel and AMD \u2014 the one that does not match your CPU is ignored. On Talos older than 1.12 the grubUseUKICmdline field does not exist and extraKernelArgs is ignored on UEFI/UKI nodes; there the args must be baked into the boot image via Image Factory.\n\nApply it in two steps \u2014 talm apply, then\u00a0talm upgrade. First push the updated machine config to the node, then re-run the Talos installer so the kernel arguments are written into the boot configuration (a plain talm apply\u00a0alone does not rewrite the boot config). You can upgrade to the same Talos version you are already on \u2014 the point is to re-run the installer with the new arguments:\n\n# 1. Push the updated machine config to the node\ntalm apply -f nodes/.yaml\n\n# 2. Re-run the installer so the kernel args land in the boot config (this reboots the node)\ntalm upgrade -f nodes/.yaml\n\u26a0\ufe0f\u00a0This reboots the node.\u00a0Roll it out one node at a time, waiting for each node to become Ready\u00a0(and for etcd quorum to recover on control-plane nodes) before moving to the next.\n\nGeneric Linux hosts (non-Talos)\n\nCreate /etc/modprobe.d/cozystack-kvm-nested.conf:\n\nundefined\noptions kvm_intel nested=0\noptions kvm_amd nested=0\nThen reboot the node (or reload the\u00a0kvm\u00a0module) for it to take effect.\n\nAutomation\n\nWe have updated our Cozystack Claude Code skills to prescribe and verify this mitigation during bootstrap and upgrades, so the setting is placed under machine.install and persists across future Talos upgrades:\n\n\u2192 https://github.com/cozystack/ccp/pull/17\n\nYou can use the\u00a0cozystack:talos-bootstrap\u00a0and cozystack:cluster-upgrade\u00a0skills to apply and verify the change automatically.\n\nAfter a fixed Talos ships\nOnce Talos releases an image with the patched kernel (6.18.38 or newer), upgrade normally. You may keep nested virtualization disabled as a hardening measure, or re-enable it (remove the two arguments) if a specific workload requires it. We will notify you when a fixed Talos release is available.", "creation_timestamp": "2026-07-30T00:00:31.318827Z"}, {"uuid": "a5083e50-5910-4797-a66f-8de5fb08b92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/426", "content": "\ud83d\udc8a Fixing CVE-2026-53359 (Januscape) + CVE-2026-46113 on Talos Linux\n\nContext\nCVE-2026-53359 (Januscape) and CVE-2026-46113 are KVM x86 shadow-paging use-after-free bugs that let a guest VM escape to the host. Both are fixed in Linux 6.18.38, which ships in Talos v1.13.6. Upgrading to it closes both at the kernel level \u2014 you do not need to disable nested virtualization.\n\nThe commonly suggested config mitigation:\nmachine.install.extraKernelArgs: [kvm_intel.nested=0, kvm_amd.nested=0] \u2014 is silently ignored on systemd-boot / UKI nodes (the usual bare-metal UEFI case):\n\nkvm_intel/kvm_amd are built into the Talos kernel, so modprobe.d and runtime /sys writes don\u2019t apply (/sys/module/kvm_intel/parameters/nested is 0444); nested= is settable only via the kernel command line.\nOn systemd-boot the cmdline is baked into the signed UKI, so extraKernelArgs are dropped (Talos warns extra kernel arguments are not supported when booting using SDBoot). grubUseUKICmdline: false only helps GRUB nodes.\n\nSo the fix is a kernel bump, not a config knob.\n\nRunbook\n\n1. Build an Image Factory schematic with your extensions\nIf your nodes use system extensions (drbd, zfs, firmware, GPU, ucode), declare them \u2014 Image Factory assembles the stock installer plus the official extensions, no custom image build required.\n\ncat > schematic.yaml <<'YAML'\ncustomization:\n  systemExtensions:\n    officialExtensions:\n      - siderolabs/drbd\n      - siderolabs/zfs\n      - siderolabs/amd-ucode\n      - siderolabs/intel-ucode\n      - siderolabs/amdgpu\n      - siderolabs/i915\n      - siderolabs/bnx2-bnx2x\n      - siderolabs/intel-ice-firmware\n      - siderolabs/qlogic-firmware\nYAML\n\ncurl -sX POST --data-binary @schematic.yaml https://factory.talos.dev/schematics\n# -> {\"id\":\"\"}\n\nTrim the extension list to what your cluster actually uses.\n\n2. Upgrade node-by-node\n\ntalosctl -n  upgrade \\\n  --image factory.talos.dev/installer/:v1.13.6\n\nRoll one node at a time; on control-plane nodes wait for etcd and your CSI/storage to be healthy between nodes. Talos only tests migrations between adjacent minors \u2014 from an old release, upgrade sequentially through each minor\u2019s latest patch rather than jumping straight.\n\n3. Verify\n\ntalosctl -n  version                          # Server: v1.13.6\ntalosctl -n  read /proc/sys/kernel/osrelease  # 6.18.38-talos\ntalosctl -n  get extensions                   # your extensions present\n\nkvm_intel.nested may stay Y \u2014 that\u2019s expected; the vulnerable path is fixed in the kernel.\n\nReady installer (Cozystack extension set)\n\nStandard Cozystack extensions (drbd, zfs, amd/intel-ucode, amdgpu, i915, bnx2-bnx2x, intel-ice-firmware, qlogic-firmware):\n\nfactory.talos.dev/installer/be66fdc8a38c2f517f33cba0a6daa7ab97ff87d51e8ca7d2160e45911ba09cf5:v1.13.6\n\nReferences:\n\nCVE-2026-53359 (Januscape): \nhttps://nvd.nist.gov/vuln/detail/CVE-2026-53359\nCVE-2026-46113: https://nvd.nist.gov/vuln/detail/CVE-2026-46113\n\nTalos bootloader / UKI cmdline: https://docs.siderolabs.com/talos/v1.13/platform-specific-installations/bare-metal-platforms/bootloader\n\nTalos Image Factory: https://factory.talos.dev", "creation_timestamp": "2026-07-30T00:00:31.363671Z"}, {"uuid": "57f6c70f-c72e-4c17-a771-c598d093fd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/aenix_io/427", "content": "\ud83d\udc7bThird CVE this week, but good news: Cozystack isn't exposed by design and the fix is the same v1.13.6 upgrade you already know. Details below\ud83d\udc47\n\nSecurity Advisory: CVE-2026-43499 (\"GhostLock\") \u2014 Cozystack Exposure Assessment\nOn July 7, 2026, a critical Linux kernel local privilege escalation \u2014 CVE-2026-43499 (\"GhostLock\") \u2014 was disclosed with a working proof-of-concept. It is a stack use-after-free in the kernel real-time mutex (rtmutex) priority-inheritance path, reachable from futex(2): on the proxy-lock rollback taken from futex_requeue(), remove_waiter() clears pi_blocked_on on the wrong task, leaving a dangling pointer to a freed kernel stack frame. Introduced in Linux 2.6.39 (2011), it affects every kernel up to v7.1-rc1, needs only CONFIG_FUTEX_PI=y (no capabilities, no user namespaces), and can be escalated into a container escape \u2014 an unprivileged local process reaching root on the host kernel.\n\nThe upstream fix is commit 3bfdc63936dd, shipped in stable kernels 6.1.175, 6.6.140, 6.12.86, 6.18.27, and 7.0.4.\n\nReference: https://nvd.nist.gov/vuln/detail/CVE-2026-43499\n\nConfirmed not affected\nGhostLock is a local escalation: it presupposes the attacker can already run native code on the host kernel's syscall surface. By design, Cozystack gives tenants no way to do that.\n\nManaged Kubernetes and VirtualMachine services. All tenant workloads execute inside guest virtual machines running on top of unprivileged containers. Tenant code has no direct access to the host kernel syscall surface \u2014 a futex sequence issued inside a guest reaches the guest kernel, not the host.\n\nManaged databases run as non-root, non-superuser users, with no Kubernetes API access and no ability to execute arbitrary code in the server process, so a tenant cannot issue the syscall sequence the exploit requires.\n\nNo arbitrary tenant code on the management cluster. Cozystack exposes only the managed services we provide \u2014 there is no surface on which a tenant runs arbitrary native code in a container on a management node.\nBy the design of Cozystack, we currently do not see any viable attack path that would allow a tenant to reach the host kernel surface affected by this vulnerability.\n\nRecommended action \u2014 same as Januscape: upgrade the kernel\nThe vulnerability is confirmed in current Talos Linux releases, and any future regression in the isolation above could re-expose it \u2014 so we recommend applying the kernel fix regardless.\n\nGhostLock is fixed in Talos Linux v1.13.6 (kernel 6.18.38-talos, newer than the first fixed 6.18.27). This is the same upgrade we recommended for CVE-2026-53359 (\"Januscape\") and CVE-2026-46113 \u2014 one move to v1.13.6 closes all three.\n\nAlready upgraded to v1.13.6 for Januscape? You are protected \u2014 no further action needed.\nNot yet? Follow the same runbook: build an Image Factory installer with your extensions, upgrade node-by-node to v1.13.6, and verify talosctl read /proc/sys/kernel/osrelease shows 6.18.38-talos. Move one node at a time, waiting for etcd quorum and storage health between control-plane nodes.\nIf you cannot upgrade immediately, kernel.randomize_kstack_offset=1 (via machine.sysctls) reduces the exploit's reliability as a defense-in-depth measure \u2014 not a substitute for the fix.\n\nWe will update this advisory as fixed releases and further mitigations are confirmed.", "creation_timestamp": "2026-07-30T00:00:31.455910Z"}, {"uuid": "b5f084da-b925-4497-be3e-60520785a614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "Telegram/x-n0ylXESV0VMQn7dfRNSBcrcNynpmfUXh9w9EUT5ZseMLA", "content": "", "creation_timestamp": "2026-07-30T00:00:32.069248Z"}, {"uuid": "8bc8df22-b89e-43af-a861-6b1280c5c37a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/ittales/721", "content": "\u0425\u043e\u0440\u043e\u0448\u0430 \u0442\u0430 CVE https://nvd.nist.gov/vuln/detail/CVE-2026-53359 , \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 POC \u0435\u0441\u0442\u044c https://github.com/V4bel/Januscape\n\u041e\u043f\u044f\u0442\u044c \u0438\u043b\u0438 \u0441\u043b\u0438\u043b\u0438, \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u043e\u043f\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u043e-\u043e-\u043e-\u043e-\u043e\u0447\u0435\u043d\u044c \u0434\u043e\u043b\u0433\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u0434\u0440\u0443\u0433 \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438 \u0438 \u0432\u0441\u0435 \u0442\u0430\u043a\u0438\u0435 \u00ab\u041e\u0439-\u043e\u0439-\u043e\u0439, \u0447\u0442\u043e \u0436\u0435 \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f\u00bb.\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u0432 KVM \u0435\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434, \u043a\u0430\u043a \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 16 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0422\u043e \u0435\u0441\u0442\u044c, \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043c\u0438\u0442 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2032a93d66fa, \u0433\u0434\u0435 \u0432\u0441\u0451 \u0441\u043b\u043e\u043c\u0430\u043b\u043e\u0441\u044c, \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2010.\n\n\u0410 \u043f\u043e\u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0432\u0441\u0451 19 \u0438\u044e\u043d\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81ccda30b4e8\n\n\u041e\u0434\u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u2013 \u043d\u0443\u0436\u0435\u043d \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0443\u0442.", "creation_timestamp": "2026-07-30T00:02:02.724928Z"}, {"uuid": "9909c2e1-12f2-4bc9-89dd-a84711ada5e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/true_secator/8562", "content": "\u0412 \u0446\u0435\u043b\u043e\u043c, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Trail of Bits\u00a0\u0410\u0440\u0442\u0435\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u0430\u0433\u0435\u043d\u0442 \u0418\u0418 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u043e\u043a\u0438\u0434\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 QEMU/KVM, \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0442\u0430\u0432\u044f\u0442 \u043f\u043e\u0434 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u043e\u0432\u0435\u043b \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Patch the Planet \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a GPT 5.6-Cyber. \u041e\u043d \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u0435\u0440\u0435\u0434 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0437\u0430\u0434\u0430\u0447\u0443 \u0432 \u0441\u0442\u0438\u043b\u0435 CTF: \u0432\u044b\u0439\u0442\u0438 \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b Debian 12, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 Linux \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u043c AMD Zen 3, \u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438.\n\n\u0410\u0433\u0435\u043d\u0442\u0443 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435, \u0438 \u0435\u043c\u0443 \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u041f\u041e, \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433\u0430, \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432, \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u044f\u0441\u044c \u043e\u0442 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u043a\u043e\u0434\u0430 \u0438 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0435 \u043e\u0440\u0430\u043a\u0443\u043b\u044b, \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 12-\u0447\u0430\u0441\u043e\u0432\u044b\u0445 \u0441\u0435\u0441\u0441\u0438\u0439 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 Januscape, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u043a\u0430\u043a CVE-2026-53359, - \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0425\u043e\u0442\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043d\u0435 \u0431\u044b\u043b\u043e, \u0430\u0433\u0435\u043d\u0442 \u0441\u043e\u0437\u0434\u0430\u043b \u0435\u0433\u043e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0437\u0430 \u0447\u0430\u0441. \u041f\u043e\u043f\u044b\u0442\u043a\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u044e \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043d\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0431\u0443\u0434\u0438\u043b\u043e \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433\u0430 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Debian.\n\n\u0417\u0430\u0442\u0435\u043c \u0430\u0433\u0435\u043d\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u0440\u0443\u0433\u043e\u0439 \u043f\u0443\u0442\u044c \u0447\u0435\u0440\u0435\u0437 libslirp, \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e QEMU. \u0412 Debian 12 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u0435\u0440\u0441\u0438\u044f libslirp 4.7.0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u043a CVE-2026-9539.\n\n\u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0432\u0438\u043b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d CVE, \u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0445\u043e\u0441\u0442\u0430.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043b QEMU \u0438 libslirp \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0412 \u043e\u0442\u0432\u0435\u0442 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b QEMU, KVM, \u044f\u0434\u0440\u043e Linux \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u0441\u043e\u0431\u0440\u0430\u043b \u043d\u043e\u0432\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0443\u044e \u0442\u0440\u0438 0-day \u0438 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c KVM, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u0430 \u044f\u0434\u0440\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430.\n\n\u0412 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0445\u043e\u0434\u0438\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0430 VAPIC \u0432 QEMU, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u043e\u0434\u043a\u0430\u0447\u043a\u0438 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 KVM, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0438 \u0441\u0435\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 libslirp, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c.\n\n\u0410\u0433\u0435\u043d\u0442 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 QEMU, CUPS \u0438 libslirp, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443 \u043e\u0431\u0449\u0435\u0433\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0434\u043b\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0418\u0418.\n\n\u0411\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u044b\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u044b \u0441 \u0431\u043e\u043b\u0435\u0435 \u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0440\u0438\u0441\u043a\u043e\u0432\u0430\u043d\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0433\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0442\u044c \u043d\u0435\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.\n\nTrail of Bits \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Firecracker, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\n\u041d\u043e\u0432\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u043a\u043e\u0440\u043e\u0442\u043a\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043b\u043e\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0439 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0445\u043e\u0441\u0442\u0430.", "creation_timestamp": "2026-09-01T00:00:08.864164Z"}, {"uuid": "a5e8d2d2-ee5f-46c7-a6ed-cb8a6cf9dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://t.me/Russian_OSINT/7790", "content": "\ud83d\udc69\u200d\ud83d\udcbb \u0421\u0430\u0433\u0430 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0430\u0433\u0435\u043d\u0442 GPT 5.6-Cyber \u0442\u0440\u0438\u0436\u0434\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u043b \u043c\u0438\u0444 \u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\n\n\ud83d\ude43\u0422\u043e\u043b\u044c\u043a\u043e \u043d\u0435 \u0441\u043c\u0435\u044f\u0442\u044c\u0441\u044f. \u0421\u043d\u043e\u0432\u0430 \u0445\u0430\u0439\u043f, \u0441\u043d\u043e\u0432\u0430 sandbox escape.\n\n\u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trail of Bits \u0410\u0440\u0442\u0451\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0432\u044c\u044e-\u0432\u0435\u0440\u0441\u0438\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 GPT 5.6-Cyber, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 QEMU/KVM \u043d\u0430 \u0431\u0430\u0437\u0435 Debian 12 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 AMD Zen3. \u041f\u0435\u0440\u0435\u0434 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0441\u0442\u043e\u044f\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 CTF: \u0432\u044b\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0441\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u043d\u0435\u0451 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0439 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 \u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udcd6\u041c\u043e\u0434\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 \u0445\u043e\u0441\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u0434\u043e \u0442\u0435\u0441\u0442\u0430. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u0434 \u0438 \u0432\u044b\u0437\u0432\u0430\u043b \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u0430.\n\n\ud83e\udd16\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430 \u0430\u0433\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libslirp 4.7.0 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Debian 12. \u041c\u043e\u0434\u0435\u043b\u044c \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e CVE-2026-9539 \u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u043d\u043e\u043c\u0435\u0440\u0430 CVE \u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432 \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0445\u043e\u0441\u0442\u0430.\n\n\ud83e\udd16\u041a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043b QEMU \u0438\u0437 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043f\u0441\u0442\u0440\u0438\u043c\u0430, \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u043b \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0412 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432\u043e\u0448\u043b\u0438 \u0442\u0440\u0438 0-day (\u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u0438\u0435 SMRAM \u0447\u0435\u0440\u0435\u0437 VAPIC \u0432 QEMU, \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432 KVM, \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u044f \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0432 libslirp) \u0438 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c KVM \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 paging64_invlpg(), \u0435\u0449\u0451 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u0430\u044f \u0432 \u043f\u0430\u043a\u0435\u0442\u044b \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430.\n\n\u0410\u0433\u0435\u043d\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 12 \u0447\u0430\u0441\u043e\u0432. \u041c\u043e\u0434\u0435\u043b\u044c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043a\u0430\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u0438\u0437\u0443\u0447\u0430\u043b\u0430 \u043d\u0430\u0443\u0447\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438 \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u043b\u0430 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0443\u0442\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u0438\u0437-\u0437\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c AppArmor, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u044b\u043c \u0447\u0442\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0445\u043e\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u044f\u0434\u0440\u0430 mitigations=off \u0438 \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 QEMU \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0441 \u0444\u043b\u0430\u0433\u043e\u043c -display none.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430, \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0435 \u043a\u0430\u043a \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435, \u0430 \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 \u0443\u0440\u043e\u0432\u043d\u044f APT. \u0421\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0430\u0441\u0430\u043c\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0433\u0438\u043f\u043e\u0442\u0435\u0437\u044b \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:16.262874Z"}, {"uuid": "54ed28b0-8446-44c2-93ec-a486fc0f704b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "published-proof-of-concept", "source": "https://t.me/Russian_OSINT/7790", "content": "\ud83d\udc69\u200d\ud83d\udcbb \u0421\u0430\u0433\u0430 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0430\u0433\u0435\u043d\u0442 GPT 5.6-Cyber \u0442\u0440\u0438\u0436\u0434\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440 \u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u043b \u043c\u0438\u0444 \u043e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\n\n\ud83d\ude43\u0422\u043e\u043b\u044c\u043a\u043e \u043d\u0435 \u0441\u043c\u0435\u044f\u0442\u044c\u0441\u044f. \u0421\u043d\u043e\u0432\u0430 \u0445\u0430\u0439\u043f, \u0441\u043d\u043e\u0432\u0430 sandbox escape.\n\n\u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trail of Bits \u0410\u0440\u0442\u0451\u043c \u0414\u0438\u043d\u0430\u0431\u0443\u0440\u0433 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u0440\u0435\u0432\u044c\u044e-\u0432\u0435\u0440\u0441\u0438\u044e \u0418\u0418-\u043c\u043e\u0434\u0435\u043b\u0438 GPT 5.6-Cyber, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 QEMU/KVM \u043d\u0430 \u0431\u0430\u0437\u0435 Debian 12 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 AMD Zen3. \u041f\u0435\u0440\u0435\u0434 \u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0441\u0442\u043e\u044f\u043b\u0430 \u0437\u0430\u0434\u0430\u0447\u0430 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 CTF: \u0432\u044b\u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0435\u0441\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u043d\u0435\u0451 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0439 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 \u0438 \u043e\u0442\u043b\u0430\u0434\u043a\u0438.\n\n\ud83d\udcd6\u041c\u043e\u0434\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u044f\u0434\u0440\u0435 \u0445\u043e\u0441\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Januscape (CVE-2026-53359), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0443\u044e \u0437\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044c \u0434\u043e \u0442\u0435\u0441\u0442\u0430. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0430\u0433\u0435\u043d\u0442 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043a\u043e\u0434 \u0438 \u0432\u044b\u0437\u0432\u0430\u043b \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0437\u0430\u0432\u0438\u0441\u0430\u043d\u0438\u0435 \u0445\u043e\u0441\u0442\u0430.\n\n\ud83e\udd16\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430 \u0430\u0433\u0435\u043d\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0441\u0435\u0442\u0435\u0432\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libslirp 4.7.0 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0435 Debian 12. \u041c\u043e\u0434\u0435\u043b\u044c \u0441\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0443\u044e CVE-2026-9539 \u0441 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u043d\u043e\u043c\u0435\u0440\u0430 CVE \u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432 \u0447\u0442\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0445\u043e\u0441\u0442\u0430.\n\n\ud83e\udd16\u041a\u043e\u0433\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043b QEMU \u0438\u0437 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043f\u0441\u0442\u0440\u0438\u043c\u0430, \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043a\u043e\u0434 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0438 \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u043b \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0412 \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432\u043e\u0448\u043b\u0438 \u0442\u0440\u0438 0-day (\u043f\u0435\u0440\u0435\u043a\u0440\u044b\u0442\u0438\u0435 SMRAM \u0447\u0435\u0440\u0435\u0437 VAPIC \u0432 QEMU, \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0442\u0435\u043d\u0435\u0432\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432 KVM, \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u044f \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0432 libslirp) \u0438 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c KVM \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 paging64_invlpg(), \u0435\u0449\u0451 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u0430\u044f \u0432 \u043f\u0430\u043a\u0435\u0442\u044b \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430.\n\n\u0410\u0433\u0435\u043d\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 12 \u0447\u0430\u0441\u043e\u0432. \u041c\u043e\u0434\u0435\u043b\u044c \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043a\u0430\u043b\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u0438\u0437\u0443\u0447\u0430\u043b\u0430 \u043d\u0430\u0443\u0447\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u044c\u0438, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438 \u043e\u0442\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u043b\u0430 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0443\u0442\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 CUPS \u0438\u0437-\u0437\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c AppArmor, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u044b\u043c \u0447\u0442\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0445\u043e\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u044f\u0434\u0440\u0430 mitigations=off \u0438 \u043d\u0435 \u0441\u0442\u0430\u043b \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 QEMU \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0441 \u0444\u043b\u0430\u0433\u043e\u043c -display none.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430, \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u044b\u0445 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438. \u042d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0435 \u043a\u0430\u043a \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0432 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435, \u0430 \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0443 \u0443\u0440\u043e\u0432\u043d\u044f APT. \u0421\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043c\u043e\u0434\u0435\u043b\u0438 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0430\u0441\u0430\u043c\u0438, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u0434\u044b, \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0433\u0438\u043f\u043e\u0442\u0435\u0437\u044b \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:46.583762Z"}, {"uuid": "428d72ff-62a6-4103-90e6-390dfee30e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53359", "type": "seen", "source": "https://gist.github.com/mherrera782-rgb/259992523a664f7f49b2364767207041", "content": "---\ntitle: \"Thelio Mira Multi-Tenant Client VM Hosting - Phase 1 Pablo Independent Research\"\ntask_slug: \"THELIO-MULTITENANT-RD-P1\"\nauthor: \"Senor Pablo\"\ncreated_at_utc: \"2026-09-12T16:13:26Z\"\nphase: \"Joint R&D Rigor Phase 1\"\nstatus: \"independent findings, not final policy\"\n---\n\n# Thelio Mira Multi-Tenant Client VM Hosting - Phase 1 Pablo Independent Research\n\n## 0. Boundary\n\nThis is an independent Phase 1 research packet for the standing policy question:\n\n> Thelio Mira multi-tenant client-VM hosting: durable isolation-management architecture and policy.\n\nIt is not implementation authority. It does not authorize VM creation, runtime/config changes, service changes, bridge changes, source activation, credential movement, client onboarding, or production hosting. Later phases should compare this with CF and Fable-5 findings before hardening into a Matthis-facing policy.\n\nMy evidence should be treated as current as of 2026-09-12. Where vendor docs were scraped live, I cite them directly. Where search summaries were used, I label them as lower confidence.\n\n## 1. Bottom Line\n\nThe strongest near-term policy is not \"install one VM per client and call it isolated.\" It is a small multi-tenant hypervisor operating policy with admission gates, patch gates, per-tenant network/storage/control-plane separation, and explicit residual-risk disclosure.\n\nFor Thelio Mira, the practical strongest path is:\n\n1. Continue with KVM/libvirt only if it is wrapped in a durable host admission checklist and per-tenant build template.\n2. Require host-native kernel/CVE verification before any client VM is admitted.\n3. Put every client VM on a separate virtual network or bridge, never shared `virbr0`.\n4. Disable or remove convenience channels: guest Tailscale, shared folders, qemu guest agent, clipboard, virtiofs/9p, ballooning, KSM, broad serial/log sharing.\n5. Treat the host/hypervisor as trusted by design, because Ryzen 9 9950X3D-class consumer hardware does not provide AMD SEV-SNP confidential VM isolation.\n6. Use a \"cloud-API-only\" rule for OpenClaw clones and client agents unless a separate GPU/isolation design is authorized.\n7. Adopt patch automation and monitoring as a gate, not a best-effort hygiene note.\n\nProxmox VE is worth serious consideration if Matthis wants Thelio Mira to become a recurring client-VM host rather than a one-off workstation running a few VMs. Proxmox adds a real management plane, roles, pools, VM firewalling, backup semantics, and SDN concepts that raw libvirt will otherwise require Pablo/CF to recreate by convention. OpenStack is too heavy for a single workstation-scale host. Firecracker/crosvm are worth watching for future narrow Linux agent sandboxes, but they are not a clean replacement for ordinary full-OS client VMs this week.\n\n## 2. YT Corpus Preflight\n\n```yaml\nYT_CORPUS_PREFLIGHT:\n  query_terms:\n    - multi-tenant\n    - hypervisor\n    - KVM\n    - VM escape\n    - Proxmox\n    - OpenStack\n    - Firecracker\n    - crosvm\n    - Livepatch\n    - libvirt\n  corpus_last_ingest:\n    date: 2026-07-15\n    generated_at_utc: \"2026-07-16T03:00:54.640118+00:00\"\n    source_path: \"docs/youtube/nightly-catchup/2026-07-15/youtube-catchup-manifest.json\"\n  result: NO_MATCH\n  matches: []\n  unsurfaced_match_count: 0\n  caveat: \"Corpus items are curated creator content - prior context, not verified evidence.\"\n```\n\n## 3. Phase 1 Brainstorm Evidence\n\n```yaml\nphase_1_brainstorm_evidence:\n  brainstorm_required: true\n  brainstorm_protocol_completion: true\n  brainstorm_mode: full\n  task_class: \"Hardware / Infra + Protocol / Governance\"\n  method_lenses:\n    - decision_matrix\n    - assumption_storming\n    - pre_mortem\n    - adversarial_security_review\n  divergent_generation:\n    competing_threads:\n      - \"Raw KVM/libvirt with strict Pablo-authored policy templates and verification gates.\"\n      - \"Proxmox VE as small-ops virtualization management plane.\"\n      - \"OpenStack/Nova/Neutron as cloud-like tenant model.\"\n      - \"Firecracker/crosvm microVMs for future lightweight Linux-only agent sandboxes.\"\n      - \"Separate physical hardware for higher-assurance client isolation.\"\n      - \"Hosted cloud confidential-compute alternative for clients needing stronger hardware-backed isolation.\"\n    alternative_framings:\n      - \"This is less a clone-install problem than a tenant admission-control problem.\"\n      - \"VM isolation is an operating discipline, not a one-time topology.\"\n      - \"Cloud providers accept residual hypervisor risk, but they pair it with fleet patching, detection, hardware choices, and abuse controls.\"\n    failure_modes_or_tensions:\n      - \"A VM exists but is attached to shared NAT/default L2, leaking hostnames or exposing broadcasts.\"\n      - \"Patch automation installs a fixed kernel package but the host has not rebooted into it.\"\n      - \"Guest convenience features silently create host-guest channels.\"\n      - \"A client interprets 'isolated' as host-admin-proof confidential computing.\"\n      - \"An agent clone is isolated at filesystem level but shares Discord bridge, model key, or tailnet visibility.\"\n      - \"A single-host design accumulates too much manual state to audit under time pressure.\"\n  known_unknowns:\n    open_questions:\n      - \"What exact Ubuntu release/kernel/package stream will Thelio Mira run as the KVM host?\"\n      - \"Will Matthis give any client direct VM console or SSH access, or are all client VMs agent-operated only?\"\n      - \"Will client data require contractual security language beyond Matthis-owned-risk disclosure?\"\n      - \"Will Thelio Mira remain a workstation with Sunshine/desktop workload, or become a dedicated client-VM host?\"\n    visibility_limits:\n      - \"Current local shell is WSL and cannot certify Thelio Mira bare-metal kernel, libvirt state, CPU topology, KSM, AppArmor, or VM configuration.\"\n      - \"No CF/Fable-5 independent packet was read before authoring this Phase 1 artifact.\"\n  convergence_boundary:\n    conclusions_deferred: true\n    cross_analysis_or_design_deferred_to_later_phase: true\n```\n\n## 4. Research Threads\n\n### Thread A - Threat Model And Honest Isolation Language\n\nClient VMs on one host can be strongly separated from each other by KVM, per-VM QEMU processes, mandatory access control, virtual network separation, per-disk file permissions, resource quotas, and patch discipline. They cannot be honestly described as \"totally isolated\" in the physical or hypervisor-compromise sense.\n\nThe honest language should be:\n\n> Thelio Mira provides hardened logical VM isolation on Matthis-owned shared hardware. The host/hypervisor remains a trusted component. A host compromise, hypervisor escape, firmware compromise, malicious administrator action, or severe hardware side channel can break tenant isolation.\n\nThis is similar in category to public-cloud multi-tenancy, but not equal in assurance. AWS/GCP/Azure pair shared-host virtualization with dedicated security teams, custom hardware/firmware chains, confidential computing SKUs, fleet-wide telemetry, live migration, automated patch rollouts, and formal incident processes. Thelio Mira can borrow operating patterns, not claim cloud-provider-grade guarantees.\n\nPolicy implication: every client admission should classify whether \"host owner can technically access or disrupt the VM\" is acceptable. If not, Thelio Mira is the wrong substrate; use dedicated hardware or cloud confidential compute.\n\n### Thread B - KVM/Libvirt Baseline\n\nRaw KVM/libvirt is a viable substrate only if we make implicit host controls explicit. The required baseline is:\n\n- one tenant/client per VM unless Matthis explicitly accepts same-client grouping\n- no shared libvirt `default` network for unrelated clients\n- one virtual network/bridge per tenant, with no L2 sharing between tenants\n- no guest VPN/tailnet membership by default\n- no host-shared folders, virtiofs, 9p, shared clipboard, broad virtio-serial, qemu guest agent, or SPICE convenience channels\n- AppArmor/sVirt confinement enabled and verified per QEMU process\n- QEMU running unprivileged under the distro libvirt user model\n- KSM disabled and masked\n- memory ballooning disabled for client VMs\n- fixed memory reservations; avoid overcommit for client workloads\n- CPU topology policy: avoid cross-tenant SMT sibling sharing, or disable SMT/core-schedule if threat model requires it\n- nested virtualization disabled unless a client workload explicitly requires it and Matthis accepts increased risk\n- `/dev/kvm` limited to trusted virtualization users/groups, not world-writable\n- separate VM images, backup targets, serial logs, cloud-init seed ISOs, and metadata\n- separate secrets, model-provider keys/projects, Discord bot identities, and bridge scope\n\nLibvirt can do most of this, but it does not force Pablo/CF to remember it. That is the danger. If raw libvirt stays the approach, Thelio Mira needs a \"client VM admission checklist\" plus machine-readable config audit script before first client launch.\n\n### Thread C - Proxmox VE As Small-Ops Management Plane\n\nProxmox VE is the most plausible alternative to hand-managed libvirt for a single-node or small-node client VM host. It provides a web/API management plane over KVM/QEMU, storage, backup, firewall, permissions, and SDN concepts. The attractive part is not magic isolation; it is that tenancy controls become visible objects: users/groups, pools, network definitions, VM firewall flags, backup jobs, and storage allocation.\n\nLikely advantages:\n\n- resource pools and ACLs reduce accidental cross-tenant operator access\n- SDN/VLAN/VXLAN/VNet concepts make per-tenant network separation less ad hoc\n- VM firewall and anti-spoofing settings are first-class operational controls\n- snapshots/backups are native operational concepts\n- easier audit/readback for \"which VM belongs to which tenant\"\n- better fit if Matthis expects recurring VM lifecycle work\n\nLikely costs:\n\n- changes the host operating model and may conflict with Thelio Mira workstation/desktop-stack goals\n- adds a large management plane that itself needs patching and access control\n- may require reinstall/migration or careful coexistence decisions\n- web UI exposure becomes a new attack surface if not tailnet/localhost/admin-only\n- still not confidential computing; hypervisor remains trusted\n\nPreliminary position: adopt/watch. Proxmox is worth a decision gate if Thelio Mira is truly becoming a standing client-VM host. It is too big to casually install as a side effect of clone provisioning.\n\n### Thread D - OpenStack Nova/Neutron\n\nOpenStack has the right conceptual model for multi-tenant VM hosting: projects, RBAC, Nova placement, Neutron networks/security groups, host aggregates, provider network RBAC, anti-spoofing, and cloud-style operational separation. It also has the wrong scale for this immediate problem.\n\nOpenStack makes sense when the operational goal is a cloud with multiple compute nodes, API-driven tenant self-service, live migration, image services, block/object storage, quotas, and mature operator staffing. Thelio Mira is a single workstation-class host with desktop-stack work landing in parallel. Running OpenStack to protect one or a few local client VMs likely creates more failure modes than it removes.\n\nPreliminary position: skip for Thelio Mira Phase 1/2. Borrow concepts: projects/tenants, network RBAC, security groups, host aggregate ideas, anti-spoofing, and explicit compute placement. Do not deploy OpenStack.\n\n### Thread E - Firecracker / Crosvm / MicroVMs\n\nFirecracker is built for secure, multi-tenant function/container-style services. Its own docs say it is purpose-built for secure multi-tenant container and function services, uses KVM, has a minimal device model, supports very low VM overhead, includes a jailer, applies seccomp filters, cgroups, namespaces, and rate limiting, and expects host-level network filtering. It is an alternative to general-purpose QEMU for narrow Linux workloads.\n\nImportant source facts:\n\n- Firecracker is \"purpose-built for creating and managing secure, multi-tenant container and function-based services.\"\n- It exposes only a minimal device model and is written in Rust.\n- Production use should start Firecracker via the `jailer`.\n- It explicitly says it does not perform network filtering and guest egress should be filtered at the host level.\n- Each Firecracker process encapsulates one microVM.\n\nThis is attractive for future OpenClaw worker/agent sandboxes if we can standardize immutable images and API-driven boot. It is not a drop-in replacement for full client Ubuntu desktops or arbitrary VMs. It also adds a custom image-building and orchestration problem.\n\nCrosvm has similar minimal-VMM appeal, but Firecracker has stronger production proof in serverless/container multi-tenancy and clearer public docs for jailer/seccomp/resource limits.\n\nPreliminary position: watch/pilot later for narrow Linux agent runtimes. Do not block current Thelio Mira client VM policy on adopting microVMs.\n\n### Thread F - Patch Management And VM Escape Reality\n\nThe Januscape/CVE pair makes the guest-to-host risk concrete. Ubuntu tracks CVE-2026-53359 as a High priority, CVSS 8.8, \"guest to host escape in KVM,\" fixed for Ubuntu 26.04 generic `linux` at `7.0.0-29.29` and Ubuntu 24.04 generic `linux` at `6.8.0-137.137`; patch detail references `81ccda30b4e83d8f5cc4fd50503c44e3a33abfeb`. Ubuntu tracks CVE-2026-46113 as CVSS 8.8 for KVM shadow paging UAF, fixed for Ubuntu 26.04 generic `linux` at `7.0.0-28.28` and 24.04 generic `linux` at `6.8.0-136.136`, with patch `0cb2af2ea66ad8ff195c156ea690f11216285bdf`.\n\nGoogle's kvmCTF rules are also useful calibration: Google pays up to $250,000 for full KVM VM escapes, $100,000 for arbitrary memory writes, $50,000 for arbitrary memory reads, and $20,000 for host DoS. That is not compliance theater. It is a live research market around exactly this boundary.\n\nThe policy should separate three patch states:\n\n- `SAFE_TO_ADMIT`: running kernel and installed kernel packages meet current CVE floor; no reboot-required mismatch; libvirt/qemu package status current.\n- `PATCHED_ON_DISK_ONLY`: fixed kernel package installed but host has not rebooted; no new client VM admission.\n- `UNKNOWN_OR_VULNERABLE`: cannot prove fixed version; no new client VM admission.\n\nCanonical Livepatch should be considered an exposure-window reducer, not a reboot substitute. Ubuntu's Livepatch page says it patches high/critical kernel vulnerabilities while the system runs and reduces unplanned work; it also says Livepatch is not a replacement for upgrade and reboot. Ubuntu unattended-upgrades applies security updates automatically and has explicit reboot and service restart behavior, including default `Automatic-Reboot \"false\"`.\n\nPreliminary patch policy:\n\n- enable security unattended-upgrades, but no automatic host reboot\n- enable Ubuntu Pro Livepatch if license/accounting is acceptable\n- monitor livepatch status, `/var/run/reboot-required`, installed-vs-running kernel, qemu/libvirt pending restarts, and Ubuntu CVE status for KVM packages\n- set a hard maximum exposure SLA for High/Critical KVM guest-host CVEs\n- require scheduled reboot maintenance when Livepatch cannot cover a CVE or when fixed packages are only installed on disk\n\n## 5. Tooling And Platform Candidate Scan\n\n### Raw KVM/libvirt\n\nLicense/maturity: mature OSS, standard Linux virtualization stack.\n\nIntegration cost: low near-term, high policy burden.\n\nAdopt/watch/skip: adopt only with policy wrapper and audit script.\n\nWhy: best near-term compatibility; weak default ergonomics for recurring multi-tenant operation.\n\n### Proxmox VE\n\nLicense/maturity: mature OSS/commercial support ecosystem.\n\nIntegration cost: medium to high depending on whether Thelio Mira can become Proxmox-first rather than Ubuntu-desktop-first.\n\nAdopt/watch/skip: watch/decision-gate; possible adopt if Matthis wants recurring VM hosting.\n\nWhy: turns tenant resources, backups, firewalling, pools, and permissions into visible managed objects.\n\n### OpenStack\n\nLicense/maturity: mature OSS cloud platform.\n\nIntegration cost: very high.\n\nAdopt/watch/skip: skip for single-host Thelio Mira; borrow concepts only.\n\nWhy: right abstraction at wrong scale.\n\n### Firecracker\n\nLicense/maturity: Apache 2.0, production lineage via AWS Lambda/Fargate class services.\n\nIntegration cost: medium/high because it requires image, network, jailer, API, and lifecycle tooling.\n\nAdopt/watch/skip: watch/pilot later for narrow Linux API-agent sandboxes.\n\nWhy: excellent attack-surface story for small Linux microVMs; not a general VM/desktop replacement.\n\n### Crosvm\n\nLicense/maturity: mature in ChromiumOS/ChromeOS virtualization lineage.\n\nIntegration cost: medium/high, fewer obvious small-ops recipes than libvirt/Proxmox.\n\nAdopt/watch/skip: watch.\n\nWhy: useful reference point for minimal VMM design; Firecracker looks more directly relevant for multi-tenant agent workloads.\n\n### Ubuntu Pro Livepatch\n\nLicense/maturity: Canonical product, mature.\n\nIntegration cost: low if Ubuntu Pro account/token available.\n\nAdopt/watch/skip: adopt candidate for hypervisor host, subject to Matthis account/license decision.\n\nWhy: reduces urgent reboot pressure for high/critical kernel CVEs but does not replace reboots.\n\n### Canonical Landscape\n\nLicense/maturity: Canonical systems management.\n\nIntegration cost: medium.\n\nAdopt/watch/skip: watch unless Thelio Mira grows into several hosts.\n\nWhy: overkill for one host but useful if patch/compliance reporting becomes a client-facing obligation.\n\n## 6. Phase 1 Toolkit Audit\n\n### Toolkit Inventory\n\n```yaml\ntoolkit_inventory:\n  local_shell_inventory: partial\n  reason: \"Current Pablo shell is WSL; cannot certify Mira bare-metal host.\"\n  web_search: strong\n  firecrawl_scrape: strong\n  pablo_joint_rd_rigor_skill: strong\n  clone_provisioning_skill: strong\n  clone_service_safety_skill: strong\n  current_libvirt_host_access: missing\n  host_native_kernel_readback: missing\n  host_native_libvirt_readback: missing\n  vm_config_audit_script: missing\n  per_tenant_manifest_template: missing\n  patch_sla_monitor: missing\n  CVE_floor_registry: missing\n  backup_restore_test_fixture: missing\n```\n\n### Gap / Cost Analysis\n\n```yaml\ngap_cost_analysis:\n  - gap: \"No host-native Mira evidence surface in current Pablo shell.\"\n    cost: \"Low if Matthis/CF can run read-only host commands; high if access path remains unclear.\"\n    risk_if_open: \"False security claims and wrong sizing/gating.\"\n  - gap: \"No durable client VM admission checklist.\"\n    cost: \"Medium documentation plus command-readback schema.\"\n    risk_if_open: \"Ad hoc VM creation misses a bridge, shared folder, qga, KSM, or patch gate.\"\n  - gap: \"No automated libvirt/domain/network audit.\"\n    cost: \"Medium script development and test fixtures.\"\n    risk_if_open: \"Config drift silently weakens tenant isolation.\"\n  - gap: \"No KVM CVE floor monitor.\"\n    cost: \"Medium; combine Ubuntu CVE pages/package versions/reboot-required checks.\"\n    risk_if_open: \"Host admits clients while vulnerable or patched-on-disk-only.\"\n  - gap: \"No client-facing residual-risk disclosure template.\"\n    cost: \"Low/medium; needs Matthis/legal/commercial judgment.\"\n    risk_if_open: \"Overpromising isolation.\"\n  - gap: \"No backup/restore drill policy per tenant.\"\n    cost: \"Medium ongoing operational burden.\"\n    risk_if_open: \"Backups exist but cannot be safely restored or are cross-tenant contaminated.\"\n```\n\n### Needed Enablement\n\n```yaml\nneeded_enablement:\n  - \"THELIO_HOST_READBACK.v1: host-native kernel, CPU topology, RAM, disk, GPU, firmware, KVM/libvirt, AppArmor, KSM, nested virt, qemu package versions.\"\n  - \"CLIENT_VM_ADMISSION_CHECKLIST.v1: pre-admission gates, build constraints, forbidden features, disclosure state, operator signoff.\"\n  - \"CLIENT_VM_CONFIG_AUDIT.v1: read-only script comparing libvirt XML/network definitions against policy.\"\n  - \"KVM_CVE_PATCH_GATE.v1: Ubuntu CVE fixed-version registry plus running/installed kernel comparison.\"\n  - \"TENANT_NETWORK_TEMPLATE.v1: separate libvirt network or bridge per tenant, no default virbr0.\"\n  - \"TENANT_BACKUP_RESTORE_POLICY.v1: separate destinations, encryption ownership, restore drills.\"\n  - \"BRIDGE_SCOPE_AUDIT.v1: ensure Discord/OpenClaw bridges cannot cross tenant boundaries.\"\n```\n\n### Prioritized Gap Registry\n\n```yaml\nprioritized_gap_registry:\n  - rank: 1\n    gap: \"Host-native Mira readback missing.\"\n    owner: \"CF/Matthis/Pablo when proper surface exists\"\n    next_gate: \"CF-AUTH for host-native read-only verification\"\n  - rank: 2\n    gap: \"KVM CVE patch gate missing.\"\n    owner: \"Pablo proposal, CF/Matthis approval\"\n    next_gate: \"Joint Phase 3/4 synthesis\"\n  - rank: 3\n    gap: \"Client VM admission checklist missing.\"\n    owner: \"Pablo/CF co-authored policy\"\n    next_gate: \"Joint Phase 5 Matthis decision\"\n  - rank: 4\n    gap: \"Read-only libvirt isolation audit script missing.\"\n    owner: \"Pablo after CF-AUTH\"\n    next_gate: \"Implementation authorization\"\n  - rank: 5\n    gap: \"Client residual-risk disclosure language missing.\"\n    owner: \"Matthis/CF with Pablo technical input\"\n    next_gate: \"Matthis business/legal judgment\"\n```\n\n## 7. Source Review Forced Adjacency Scan\n\n```yaml\nsource_review_forced_adjacency_scan:\n  methodology:\n    finding: \"Treat VM hosting as admission-control and continuous assurance, not one-time build.\"\n    staged_action: \"Create durable checklist and audit artifact after joint synthesis.\"\n  tooling:\n    finding: \"Raw libvirt needs wrappers; Proxmox may reduce drift for recurring hosting; Firecracker is future-specialized.\"\n    staged_action: \"Decision gate: raw libvirt now vs Proxmox migration/pilot.\"\n  governance:\n    finding: \"Client admission requires explicit residual-risk language and patch gate.\"\n    staged_action: \"Matthis/CF decide client-facing language before onboarding.\"\n  market_structure:\n    finding: \"Cloud providers accept shared-hypervisor risk but compensate with hardware, telemetry, and dedicated security ops.\"\n    staged_action: \"Do not imply cloud-equivalent assurance on Thelio Mira.\"\n  source_discovery:\n    finding: \"Useful ongoing sources: Ubuntu CVE tracker/USNs, kernel stable releases, libvirt/qemu advisories, Google kvmCTF/security-research, Proxmox advisories.\"\n    staged_action: \"Build CVE source list into patch monitor if authorized.\"\n  watch_project_cross_reference:\n    finding: \"Impacts Thelio desktop-stack VM, OpenClaw clone provisioning, Discord bridge scoping, model routing, backup/Drive relay boundaries.\"\n    staged_action: \"Cross-analysis must include these surfaces.\"\n  sme_domain_routing:\n    finding: \"Security SME review should gate implementation.\"\n    staged_action: \"Require Security SME before first client VM if policy becomes operational.\"\n```\n\n## 8. Joint R&D Adjacency Map\n\n```yaml\njoint_rd_adjacency_map_v0:\n  triggered: true\n  trigger_basis: security_governance\n  independent_author: Pablo\n  adjacency_candidates:\n    - surface_name: \"clone-provisioning/SKILL.md\"\n      surface_type: skill\n      direct_effect: \"Future clone readiness must distinguish Matthis-owned clone VMs from client tenant VMs.\"\n      risk_if_missed: \"A client-facing clone could inherit Matthis-owned Option C assumptions.\"\n      confidence: high\n    - surface_name: \"clone-spawning-service-safety/SKILL.md\"\n      surface_type: skill\n      direct_effect: \"Clone services must remain tenant-scoped and never mutate canonical gateway/bridge units.\"\n      risk_if_missed: \"One clone service change could affect another tenant or main Pablo.\"\n      confidence: high\n    - surface_name: \"Discord bridge / OpenClaw bridge configuration\"\n      surface_type: service\n      direct_effect: \"Bridge scope must be per-clone/per-tenant, not globally subscribed.\"\n      risk_if_missed: \"Messaging stream becomes a cross-tenant data path.\"\n      confidence: high\n    - surface_name: \"Thelio desktop-stack runbook\"\n      surface_type: doc\n      direct_effect: \"Desktop VM GPU/Sunshine choices compete with client VM isolation and resource policy.\"\n      risk_if_missed: \"GPU passthrough or remote-access convenience features weaken tenant boundary.\"\n      confidence: medium\n    - surface_name: \"CF_STATUS.md / CF_SESSION_MEMORY task gates\"\n      surface_type: governance\n      direct_effect: \"Client VM admission needs explicit patch/readback gates before build CF-AUTH.\"\n      risk_if_missed: \"Queue movement could look like implementation approval before host safety is proven.\"\n      confidence: high\n  exchanged_at_phase_2: false\n  raw_findings_reference: \"pending_gist\"\n  forbidden_actions:\n    - \"no implementation authority\"\n    - \"no runtime/config/cron/service mutation\"\n    - \"no source activation or scoring/model-feed change\"\n    - \"no portfolio or trading action\"\n```\n\n## 9. Expert In Loop Thread\n\n```yaml\nexpert_in_loop_thread:\n  triggered: true\n  trigger_basis: security\n  reviewed_roles:\n    - Security SME\n    - Authority Reviewer\n  required_gate_role: Security SME\n  implementation_gate: SME_REVIEW_REQUIRED\n  rationale: \"The design affects client data isolation, hypervisor escape risk, host/guest channels, credentials, bridge scoping, and patch gates.\"\n  risk_if_omitted: \"A plausible-looking VM setup could overclaim tenant isolation or miss a known escape/side-channel class.\"\n  forbidden_actions:\n    - \"no implementation before required gate\"\n    - \"no runtime/config/cron/service mutation\"\n    - \"no source activation or scoring/model-feed change\"\n    - \"no portfolio or trading action\"\n```\n\n## 10. Candidate Policy Skeleton For Later Phases\n\nThis skeleton is included as Phase 1 raw material, not a final recommendation.\n\n### Client VM Admission Gate\n\nEach client VM requires:\n\n- client classification: Matthis-owned, internal, client-facing, regulated/sensitive, or high-risk untrusted\n- explicit acceptance of shared-host residual risk\n- host-native kernel and package readback\n- current KVM CVE floor pass\n- no reboot-required mismatch for kernel/qemu/libvirt\n- AppArmor/sVirt pass\n- KSM disabled/masked\n- nested virtualization disabled\n- `/dev/kvm` permissions restricted\n- per-tenant network/bridge pass\n- no default `virbr0` attachment\n- no guest VPN/tailnet unless explicitly justified\n- no qemu guest agent/shared folders/clipboard/virtiofs/9p\n- fixed RAM, no ballooning\n- CPU placement policy pass\n- backup target declared and separated\n- Discord/model/API identity separation where applicable\n\n### Ongoing Assurance\n\nDaily or per-session read-only checks:\n\n- running kernel version\n- installed kernel package candidate\n- reboot-required and reboot-required packages\n- Ubuntu CVE status for KVM/kernel/qemu/libvirt\n- Livepatch status when enabled\n- libvirt VM list and domain XML policy diff\n- network attachment audit\n- KSM state\n- qemu guest agent/channel audit\n- backup freshness\n- failed login/console access log review\n\n### Incident Gate\n\nOn High/Critical KVM guest-to-host CVE:\n\n- freeze new client VM admissions\n- classify running host as patched, patched-on-disk-only, or vulnerable/unknown\n- if livepatch covers it, mark exposure reduced but still schedule reboot if needed\n- if no livepatch or vulnerable running kernel, shut down/suspend client VMs or isolate per Matthis/CF decision\n- document client notification requirement if any client SLA/disclosure requires it\n\n## 11. Recency Check\n\n```yaml\nrecency_check:\n  current_date: \"2026-09-12\"\n  sources:\n    - url: \"https://ubuntu.com/security/CVE-2026-53359\"\n      source_date: \"published 2026-07-04; updated 2026-09-07\"\n      freshness: current\n    - url: \"https://ubuntu.com/security/CVE-2026-46113\"\n      source_date: \"published 2026-05-28; updated 2026-09-07\"\n      freshness: current\n    - url: \"https://ubuntu.com/server/docs/how-to/software/automatic-updates/\"\n      source_date: \"modified 2026-07-15\"\n      freshness: current\n    - url: \"https://ubuntu.com/security/livepatch\"\n      source_date: \"scraped 2026-09-12; page current enough for product posture\"\n      freshness: current\n    - url: \"https://firecracker-microvm.github.io/\"\n      source_date: \"scraped 2026-09-12\"\n      freshness: current\n    - url: \"https://github.com/firecracker-microvm/firecracker/blob/main/docs/design.md\"\n      source_date: \"latest visible commit 2026-05-06\"\n      freshness: current\n    - url: \"https://github.com/google/security-research/blob/master/kvmctf/rules.md\"\n      source_date: \"latest visible commit 2026-07-31\"\n      freshness: current\n    - url: \"https://www.amd.com/en/developer/sev.html\"\n      source_date: \"scraped 2026-09-12; page metadata updated 2026-09-08\"\n      freshness: current\n  stale_risk: \"low for cited CVE and vendor product posture; medium for operational advice until validated against Mira host.\"\n```\n\n## 12. What CF Should Challenge\n\n- Whether Proxmox is worth the host-operating-model disruption, or whether raw libvirt plus audit script is sufficient for the next 30 days.\n- Whether \"client-facing\" should always require a client notification/disclosure artifact before admission.\n- Whether no guest Tailscale is too strict for operational recovery.\n- Whether qemu guest agent should be entirely forbidden or allowed in tightly bounded internal-only VMs.\n- Whether memory ballooning and KSM should be globally disabled even for Matthis-owned/non-client VMs to reduce drift.\n- Whether Firecracker deserves an early pilot for OpenClaw clones if they are Linux API-only.\n\n## 13. Silent False Success Modes\n\n- Host has fixed kernel package installed but is still running vulnerable old kernel.\n- VM is on a separate subnet but same L2 bridge/dnsmasq as another tenant.\n- Discord bot token is separate but bridge process subscribes to all channels.\n- VM disk paths are separate but backup job stores all tenant backups in one unsegmented location.\n- AppArmor is installed but libvirt domain profiles are unconfined or permissive.\n- KSM is disabled once but re-enabled after reboot or package/service change.\n- No guest Tailscale is configured, but host-side NAT still allows VM-to-VM routing.\n- qemu guest agent absent at install but later added by template inheritance.\n- CPU pinning exists but ignores SMT sibling topology.\n- Client hears \"isolated VM\" and assumes host-admin-proof confidentiality.\n\n## 14. Sources\n\n- Ubuntu CVE-2026-53359: https://ubuntu.com/security/CVE-2026-53359\n- Ubuntu CVE-2026-46113: https://ubuntu.com/security/CVE-2026-46113\n- Ubuntu automatic updates documentation: https://documentation.ubuntu.com/server/how-to/software/automatic-updates/\n- Ubuntu Livepatch: https://ubuntu.com/security/livepatch\n- Firecracker homepage/docs: https://firecracker-microvm.github.io/\n- Firecracker design doc: https://github.com/firecracker-microvm/firecracker/blob/main/docs/design.md\n- Google kvmCTF rules: https://github.com/google/security-research/blob/master/kvmctf/rules.md\n- AMD SEV overview: https://www.amd.com/en/developer/sev.html\n- Proxmox VE administration guide: https://pve.proxmox.com/pve-docs/pve-admin-guide.html\n- OpenStack Security Guide: https://docs.openstack.org/security-guide/\n\n## 15. Phase 1 Closeout\n\n```yaml\nphase_1_closeout:\n  artifact_type: independent_research_packet\n  conclusion_status: preliminary_findings_only\n  recommended_next_phase: \"Phase 2 exchange raw findings; Phase 3 cross-analysis after Drive/Gist relay verification.\"\n  implementation_authority: false\n  runtime_mutation_authority: false\n  client_vm_admission_authority: false\n```\n", "creation_timestamp": "2026-09-12T16:21:16.361270Z"}]}