THREATNOIR
Subscribe
Back to advisories

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems

A 16-year-old use-after-free vulnerability in Linux KVM (CVE-2026-53359) allows guest VMs to escape to the host kernel and potentially achieve full code execution on Intel and AMD x86 systems. Exploitation requires root inside the guest and nested virtualization enabled. An unreleased exploit reportedly enables RCE on the host; a public PoC only triggers panics.

CRITICALAdvisoryJul 07, 2026
Action required
Identify all Linux KVM hosts with nested virtualization enabled. Disable nested virtualization on hosts where not required. Apply Linux kernel patches immediately when available. Monitor host kernel logs for KVM shadow-page state corruption or unexpected panics from guest activity.
Affected products
KVMIntelAMDLinuxkvmCTF
CVE IDs
CVE-2026-53359
Linked articles
Source links