All articles tagged with #kvm
Google paid $250,000 for Januscape (CVE-2026-53359), a use-after-free flaw in Linux KVM's shadow MMU that can let a malicious guest VM break out and gain root on the host; a separate flaw, GhostLock (CVE-2026-43499), lets limited users escalate to root via futex priority-inheritance. Patches are in the Linux kernel, and users should update to mitigate the risk.
Hyunwoo Kim disclosed CVE-2026-53359, a 16-year-old Linux kernel use-after-free in KVM/x86 shadow MMU that enables guest-to-host VM escape on both Intel and AMD CPUs. A successful exploit can grant root on the host and potentially take over all VMs on a multi-tenant machine or crash the host kernel; patch 81ccda30b4e8 was applied in June 2026. Administrators should ensure patched kernels on KVM/x86 hosts, especially in cloud environments, as the risk is real for Google Cloud and AWS users. A PoC and write-up exist, though full public exploitation is not released yet, and attackers could chain with other flaws like Dirty Frag.
LeafKVM is a plug-and-play, wireless remote KVM device that captures HDMI video and audio, emulates USB peripherals, and streams everything to a web browser without needing software installation on the target machine, making remote management and troubleshooting easier for both professionals and hobbyists. It features open-source hardware and firmware, and will soon be available on Crowd Supply.
Dell has launched its 32-inch 6K monitor, the U3224KB, for $3,199.99, which is over $1,000 cheaper than Apple's 32-inch $4,999 Pro Display XDR. The Dell monitor comes with a built-in webcam, speakers, and KVM switch to allow it to work with two computers simultaneously. It also has a DisplayHDR 600 certification, dual 14W speakers, and a Thunderbolt 4 connector that can offer up to 140W of power to a connected laptop. Dell has also announced the UltraSharp 38 Curved USB-C Hub Monitor, a 37.5-inch display with a resolution of 3840 x 1600, which will be available on June 22nd for $1,529.99.