Linux kernel vulnerability, dubbed Januscape and identified CVE-2026-53359, allows attackers to escape a virtual machine and execute arbitrary code on the host. Januscape has been present in the Linux kernel for approximately 16 years before being patched in June 2026. Successful exploitation allows attackers with root access inside a guest virtual machine to execute code as root on the host and take over all guests running on it or crash the host kernel (knocking every other tenant's virtual machine on the same server offline).

Source: bleepingcomputer.com