Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host. The post Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems appeared first on SecurityWeek .

According to SecurityWeek, the Januscape (CVE-2026-53359) vulnerability is a 16‑year‑old use‑after‑free bug in Linux’s KVM hypervisor affecting both Intel and AMD x86 systems, allowing a guest VM to escape and potentially execute code on the host when nested virtualization and guest admin privileges are present.[7][4][2] Linux kernel maintainers have already patched the flaw upstream and backported fixes to stable branches, but cloud and virtualization operators must verify kernel versions and apply vendor patches to prevent guest‑to‑host compromise.[4][2] From a RealGround perspective, this is primarily an AI supply chain risk because many AI workloads and agents run inside virtualized environments in multi‑tenant clouds; a VM escape could expose model weights, training data, and agent credentials on the host. Practically, organizations should update KVM hosts used for AI workloads, ensure SBOM and asset inventories track vulnerable kernels, and include VM‑escape scenarios in continuous AI red‑teaming to test whether a compromised AI tenant could pivot to the host and other AI systems.