Google pays $250K for Linux vulnerability allowing guest VM escapes

July 8, 2026 | Source: Ars Technica AI

Tags: KVM, Januscape, CVE-2026-53359, GhostLock, Linux security, cloud security, Nebula Security, AI security tools

Two critical Linux kernel vulnerabilities disclosed this week: Januscape (CVE-2026-53359), a 16-year-old KVM flaw letting guest VMs gain host root access, earned a $250K Google bounty; GhostLock (CVE-2026-43499), a 15-year privilege escalation bug, was found by Nebula Security's AI-assisted scanner Vega.

Details

Cloud infrastructure running AI workloads faces urgent patching pressure after two high-severity Linux kernel vulnerabilities surfaced this week — one of them lurking undetected for 16 years. Januscape (CVE-2026-53359) is a use-after-free bug in Linux KVM's shadow MMU emulation, affecting both AMD and Intel processors. A guest VM tenant with root privileges inside their VM can corrupt the host kernel's shadow page and either crash the host (taking down every co-tenant on the machine) or execute arbitrary code with root access on the host. Critically, the exploit uses only guest-side actions and bypasses cloud providers' custom virtualization stacks — making it dangerous even in hardened cloud environments. A crash proof-of-concept already exists publicly; a full escape exploit exists but won't be published soon. Google awarded researcher Hyunwoo Kim $250,000 for the disclosure. The second flaw, GhostLock (CVE-2026-43499), enables local privilege escalation to root via a bug in the kernel's futex priority-inheritance system, present for 15 years. It was discovered by Nebula Security using Vega, their AI-assisted vulnerability scanner — a notable demonstration of AI tooling finding legacy security debt. Any enterprise or cloud team running AI workloads on KVM-based infrastructure should prioritize patching Januscape immediately.