Back to the CVE list
CVE-2026-53359Proof of concept (PoC) published · CISA

KVM: x86: Fix shadow paging use-after-free due to unexpected role

CVSS score

8.8

EPSS probability

%1.0

Risk score

0.1

Published

3 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

The Hacker News06.08.2026

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page

Read the full story
Ars Technica08.07.2026

Google pays $250K for Linux vulnerability allowing guest VM escapes

Both vulnerabilities allow untrusted users to gain root privileges.

Read the full story

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53359"