Google pays $250K for Linux vulnerability allowing guest VM escapes

[Starburst-David]

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity flaws to surface this week in the open source operating system.

The vulnerability resides in KVM, which is, in essence, a virtual machine app included in the kernel of many Linux distributions. The vulnerability, tracked as CVE-2026-53359, allows guest virtual machines—such as those used in cloud platforms to isolate one user’s instance from the host OS and other user instances—to break out of that container.

Published Date: Jul 08, 2026

Vulnerabilities has been mentioned in this article.
CVE-2026-53359 CVE-2026-43499

More Information:
https://arstechnica.com/security/2026/0 ... this-week/