Google pays $250K for Linux vulnerability allowing guest VM escapes

Google pays $250K for Linux vulnerability allowing guest VM escapes

Two significant vulnerabilities in the Linux operating system came to light this week, both enabling unprivileged users to escalate to root access through different attack vectors. The first vulnerability, designated CVE-2026-53359 and named Januscape, exists within KVM, a virtualization system embedded in the Linux kernel. The flaw permits untrusted guest virtual machines running on both AMD and Intel processors to break out of their isolated c…